This article is intended to provide a solution for the error below that some users experience while using the sign-in widget.
"OAUTH_ERROR", message: "The JWT was issued in the future"
NOTE: The behavior a user describes might be the Widget freezes or keeps clocking after a user logs in successfully, remaining on the screen without being removed.
- Okta-Auth-JS
- Okta-Hosted Widget
- Okta-Self-Hosted Widget
- JWT
The machines experiencing the error have their time manually adjusted, which is causing the issue due to the maxClockSkew function in the Auth-JS SDK on which the widget is built.
The recommended solution is to configure the machines to automatically synchronize the time, as mentioned in this GitHub thread. An alternative approach would be to adjust or disregard the default maxClockSkew, although this is not recommended.
