New Ory Agent Security is now live! Claim your complimentary test drive. Get Started!

Skip to main content

v26.4.8

v26.4.8​

Reject JWT bearer assertions issued in the future​

The JWT bearer grant (urn:ietf:params:oauth:grant-type:jwt-bearer) now rejects an assertion with an invalid_grant error if its iat (issued at) claim is more than five minutes in the future.

If a client's clock runs ahead, synchronize it, or set iat to the current time when signing the assertion.