Update clock tolerance for prototype & update accept header

Shopify · Sep 8, 2023 · 3f38d41 · 3f38d41
1 parent e569f8a
commit 3f38d41
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 1 deletion.
diff --git a/lib/auth/oauth/oauth.ts b/lib/auth/oauth/oauth.ts
@@ -97,6 +97,9 @@ export function tokenExchange(config: ConfigInterface) {
       path: '/admin/oauth/access_token',
       type: DataType.JSON,
       data: body,
+      extraHeaders: {
+        Accept: 'application/json',
+      },
     };
     const cleanShop = sanitizeShop(config)(shop, true)!;
 

diff --git a/lib/session/decode-session-token.ts b/lib/session/decode-session-token.ts
@@ -6,7 +6,7 @@ import {getHMACKey} from '../utils/get-hmac-key';
 
 import {JwtPayload} from './types';
 
-const JWT_PERMITTED_CLOCK_TOLERANCE = 10;
+const JWT_PERMITTED_CLOCK_TOLERANCE = 1;
 
 export interface DecodeSessionTokenOptions {
   checkAudience?: boolean;