diff --git a/src/main/java/com/spotify/github/v3/clients/JwtTokenIssuer.java b/src/main/java/com/spotify/github/v3/clients/JwtTokenIssuer.java index 8746eee2..20e652a9 100644 --- a/src/main/java/com/spotify/github/v3/clients/JwtTokenIssuer.java +++ b/src/main/java/com/spotify/github/v3/clients/JwtTokenIssuer.java @@ -36,6 +36,7 @@ public class JwtTokenIssuer { private static final SignatureAlgorithm SIGNATURE_ALGORITHM = SignatureAlgorithm.RS256; private static final long TOKEN_TTL = 600000; + private static final long TOKEN_ISSUED = 6000; private final PrivateKey signingKey; @@ -74,7 +75,7 @@ public String getToken(final Integer appId) { .setIssuer(String.valueOf(appId)) .signWith(signingKey, SIGNATURE_ALGORITHM) .setExpiration(new Date(System.currentTimeMillis() + TOKEN_TTL)) - .setIssuedAt(new Date()) + .setIssuedAt(new Date(System.currentTimeMillis() - TOKEN_ISSUED)) .compact(); } }