pub const CLOCK_SKEW_MS: i64 = 60_000;Expand description
How far the clock may be wrong before a token is refused for it.
Sixty seconds, in both directions: a token from an issuer whose clock is a minute ahead is not yet valid, and one whose clock is a minute behind has already expired. This is the number every OIDC library has and none of them explain; it is here because a distributed system without one refuses valid tokens on a machine whose NTP has drifted, and because the alternative to choosing it is choosing it accidentally.