v0.9
Pre-release
Pre-release
Changes in this release:
- Change
Keycloak.MIN_TOKEN_VALIDITY_SECONDS
from15s
to60s
. It seems that the skew of the clocks between the browser and the keycloak server can be significant in some scenarios. Increasing the minimum time decreases the chance that the skew could cause an expired token to be used by the client and rejected by the server. This does increase the number of validations and re-requests that can occur but the additional safety is considered an acceptable tradeoff.