Strange behavior for OidcTokenHandler

thibaut22200 · thibaut22200 · commit ef6b22d934fd · 2024-07-22T11:20:21.000+02:00
Test failed on my Ubuntu, and on my Windows is OK.
Differences between order in construct of Jose/Component/Checker/...
diff --git a/src/Symfony/Component/Security/Http/AccessToken/Oidc/OidcTokenHandler.php b/src/Symfony/Component/Security/Http/AccessToken/Oidc/OidcTokenHandler.php
@@ -86,9 +86,9 @@ public function getUserBadgeFrom(string $accessToken): UserBadge
 
             // Verify the claims
             $checkers = [
-                new Checker\IssuedAtChecker(0, false, $this->clock),
-                new Checker\NotBeforeChecker(0, false, $this->clock),
-                new Checker\ExpirationTimeChecker(0, false, $this->clock),
+                new Checker\IssuedAtChecker(allowedTimeDrift: 0, protectedHeaderOnly: false, clock: $this->clock),
+                new Checker\NotBeforeChecker(allowedTimeDrift: 0, protectedHeaderOnly: false, clock: $this->clock),
+                new Checker\ExpirationTimeChecker(allowedTimeDrift: 0, protectedHeaderOnly: false, clock: $this->clock),
                 new Checker\AudienceChecker($this->audience),
                 new Checker\IssuerChecker($this->issuers),
             ];
