Review

1 files changed, 7 insertions, 5 deletions

diff --git a/mod/jwt.hxx b/mod/jwt.hxx
index 65ad5c5..25e9c21 100644
--- a/mod/jwt.hxx
+++ b/mod/jwt.hxx
@@ -10,7 +10,7 @@
 
 namespace brep
 {
-  // Generate a JSON Web Token (JWT), defined in RFC 7519.
+  // Generate a JSON Web Token (JWT), defined in RFC7519.
   //
   // A JWT is essentially the token issuer's name along with a number of
   // claims, signed with a private key.
@@ -20,16 +20,18 @@ namespace brep
   //
   // The token expires when the validity period has elapsed.
   //
-  // Return the token or empty if openssl exited with a non-zero status.
+  // The backdate argument specifies the number of seconds to subtract from
+  // the "issued at" time in order to combat potential clock drift (which can
+  // casue the token to be not valid yet).
   //
-  // Throw process_error or io_error (both derived from std::system_error) if
-  // openssl could not be executed or communication with its process failed.
+  // Return the token or std::system_error in case if an error.
   //
   string
   gen_jwt (const options::openssl_options&,
            const path& private_key,
            const string& issuer,
-           const std::chrono::minutes& validity_period);
+           const std::chrono::minutes& validity_period,
+           const std::chrono::seconds& backdate = 60);
 }
 
 #endif