nextcloud / nextcloud/whiteboard

Wrong token time leads to JWT token rejection.

Open
#1,017 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
JavaScript
Stars
215
Forks
39
Avg merge
1d 3h
Merged PRs (30d)
32

Description

I have a huge problem setting up the whiteboard app so far.
The bigest problem was, that the created JWT token somehow got a issue time that was ahead one hour.

The system time was fine, date and date -u showed the right time. Still the issued token was issued in the future.

This also renders the app completely useles since no tools are available for non collaborative working.

I use a docker compose setup:

app:
    image: nextcloud
    restart: always
    ports:
      - 9999:80
    links:
      - db
    volumes:
      - ./data:/var/www/html
    environment:
      - MYSQL_PASSWORD=***
      - MYSQL_DATABASE=***
      - MYSQL_USER=nextcloud
      - MYSQL_HOST=db
      - NEXTCLOUD_TRUSTED_DOMAINS=***

  nextcloud-whiteboard-server:
    image: ghcr.io/nextcloud-releases/whiteboard:stable
    restart: always
    ports:
      - "3002:3002"
    depends_on:
      - app
    environment:
      - NEXTCLOUD_URL=***
      - JWT_SECRET_KEY=SOMESECRET
      - MAX_UPLOAD_FILE_SIZE=10485760
      - RECORDINGS_DIR=/tmp/whiteboard-recordings
      - HOST=0.0.0.0
    volumes:
      - ./whiteboard-recordings:/tmp/whiteboard-recordings

Versions:
Whiteboard (1.5.4)
Nextcloud Hub 25 Autumn (32.0.5)

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

No source file or test is named. Start by reproducing the one-hour JWT issue with the supplied Docker Compose configuration and the listed Whiteboard and Nextcloud versions, then trace token issuance and validation. Done means identifying the time discrepancy's component and confirming that newly issued tokens are accepted.

Written by the indexing model from the issue text.

Assessment

Tech stack
docker-compose, javascript
Domain
authentication, backend, security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.