Probot failing to start with bad JWT expiration too far in the future
See original GitHub issueBug Report
Current Behavior
Starting the bot with probot run ./dist/index.js
throws an error:
ERROR probot: 'Expiration time' claim ('exp') is too far in the future
Expected behavior/code Probot should start with the current configuration without erroring.
Environment
- Probot version(s): 9.11.5
- Node/npm version: Node v12.18.0/npm 6.14.4
- OS: Ubuntu 20.04 - WSL 2.0 [Windows 10]
Possible Solution
This started happening 7/6/20. I should also add that I am using the @octokit/rest
module as well for github api calls outside of the app which failed with the same message. I was generating my own JWT with an exp of 10 minutes but when I switched it to 9 minutes I no longer received this error.
Issue Analytics
- State:
- Created 3 years ago
- Comments:5 (1 by maintainers)
Top Results From Across the Web
JWT (JSON Web Token) automatic prolongation of expiration
The idea is that the refresh token never expires and it can be exchanged always for a valid JWT. The problem with a...
Read more >Getting JWT Expired errors out of nowhere - Jira Cloud
We were getting JWT Expired errors before this change and still getting them after the change. This being caused by Connect or SpringBoot ......
Read more >Managing JWT token expiration
A JWT token that never expires is dangerous if the token is stolen then someone can always access the user's data. Quoted from...
Read more >Is refreshing an expired JWT token a good strategy?
Refreshing a token is done to confirm with the authentication service that the holder of the token still has access rights.
Read more >Revoking JWTs & JWT Expiration
The most common solution is to reduce the duration of the JWT and revoke the refresh token so that the user can't generate...
Read more >Top Related Medium Post
No results found
Top Related StackOverflow Question
No results found
Troubleshoot Live Code
Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start FreeTop Related Reddit Thread
No results found
Top Related Hackernoon Post
No results found
Top Related Tweet
No results found
Top Related Dev.to Post
No results found
Top Related Hashnode Post
No results found
Top GitHub Comments
@gr2m You were right! The WSL was out of sync with the system time and required me to either do a
sudo hwclock -s
or awsl --shutdown
in powershell. After doing that time synced up and works fine.Thanks!
I’m running probot locally and authenticating manually with
@octokit/rest
works fine but probot errors. This is github.com as well.