diff --git a/libraries/bot-connector/src/main/java/com/microsoft/bot/connector/authentication/JwtTokenExtractor.java b/libraries/bot-connector/src/main/java/com/microsoft/bot/connector/authentication/JwtTokenExtractor.java index a7d313c8..8e172ad2 100644 --- a/libraries/bot-connector/src/main/java/com/microsoft/bot/connector/authentication/JwtTokenExtractor.java +++ b/libraries/bot-connector/src/main/java/com/microsoft/bot/connector/authentication/JwtTokenExtractor.java @@ -93,7 +93,9 @@ public class JwtTokenExtractor { } return CompletableFuture.supplyAsync(() -> { - Verification verification = JWT.require(Algorithm.RSA256(key.key, null)); + Verification verification = JWT + .require(Algorithm.RSA256(key.key, null)) + .acceptLeeway(tokenValidationParameters.clockSkew.getSeconds()); try { verification.build().verify(token);