informalsystems / informalsystems/emerald

bug(EngineAPI): A node can crash due to clock being out of sync with Reth, causing JWT authentication to fail

Open
#69 0 comments 0 reactions 0 assignees View on GitHub
Reth
Dominant language
Rust
Stars
25
Forks
9
PR merge metrics
No merged PRs in 30d

Description

The JWT validation can fail in Reth because the timestamp in the JWT token is outside the 60 second window that Reth requires. This causes the Malachite side to crash (code [ref](https://github.com/informalsystems/malaketh-layered-private/blob/f2bca0ab389bcd020cb3575156c0bd4d83c72f12/engine/src/engine_rpc.rs#L132)).

```
Reth1: ERROR engine::jwt-validator: Invalid JWT: IAT (issued-at) claim is not within ±60 seconds from the current time
Node1: ERROR Application error e=HTTP status client error (401 Unauthorized) for url (http://localhost:18551/)
```

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.