Auth & Security

Clock Skew Drift & Leeway Tolerances

Simulate device time desynchronization across distributed client devices and backend cloud clusters. Inject positive or negative clock drift using the X-Simulate-Clock-Skew header to test token leeway configurations.

Interactive Clock Drift Simulator

Select a drift offset below to inject time distortion into the token issuance engine:

Simulate Clock Skew: +120s

POST

response.json

{

// Click "Send" above to execute this request against the live server.

}

Why Test Clock Drift?

Real-world failure modes caused by NTP drift on mobile devices and distributed edge nodes:

Not-Before (nbf) Rejection

If client time lags behind the server, tokens generated by the server appear to be issued in the future, triggering premature token rejection errors.

False-Positive Expirations

If a client device clock is ahead by just 30 seconds, a 1-minute access token will prematurely appear expired to the client before the server rejects it.

Leeway Tolerance Cushion

Configuring a 60-second clock tolerance window in token verification libraries cleanly absorbs clock skew without weakening overall token security.

Leeway Configuration Recipes

How to configure clock tolerance across modern JWT verification libraries:

jwtVerifyWithLeeway.ts

// Node.js jsonwebtoken with Clock Tolerance Leeway

import jwt from 'jsonwebtoken';

const JWT_SECRET = process.env.JWT_SECRET || 'your_secret_salt_here';

export function verifyTokenWithLeeway(token: string) {

try {

const decoded = jwt.verify(token, JWT_SECRET, {

algorithms: ['HS256'],

// Absorb clock discrepancies up to 60 seconds (prevents nbf and premature exp errors)

clockTolerance: 60, // 60 seconds leeway

});

return decoded;

} catch (err: any) {

if (err.name === 'NotBeforeError') {

console.error('Clock skew detected: Token used before issuance timestamp (nbf)');

} else if (err.name === 'TokenExpiredError') {

console.error('Token expired:', err.expiredAt);

}

throw err;

}

PreviousExpiry Simulation

NextPassword Recovery Loop