informalsystems / informalsystems/emerald
bug(EngineAPI): A node can crash due to clock being out of sync with Reth, causing JWT authentication to fail
Open
Reth
- Dominant language
- Rust
- Stars
- 25
- Forks
- 9
- PR merge metrics
- No merged PRs in 30d
Description
The JWT validation can fail in Reth because the timestamp in the JWT token is outside the 60 second window that Reth requires. This causes the Malachite side to crash (code [ref](https://github.com/informalsystems/malaketh-layered-private/blob/f2bca0ab389bcd020cb3575156c0bd4d83c72f12/engine/src/engine_rpc.rs#L132)).
```
Reth1: ERROR engine::jwt-validator: Invalid JWT: IAT (issued-at) claim is not within ±60 seconds from the current time
Node1: ERROR Application error e=HTTP status client error (401 Unauthorized) for url (http://localhost:18551/)
```
Contributor guide
Assessment
This issue has not been assessed yet.