commit 45c4491fb971c9edf590b27b9e271b7a23a1bba6
author Liron Newman <eesheesh@users.noreply.github.com> Tue Sep 07 23:07:07 2021 +0100
committer GitHub <noreply@github.com> Tue Sep 07 15:07:07 2021 -0700
tree 16bda1c94e110d0db86ef2e8be873c6a9e2ab41b
parent 11ebaeb9d7c0862916154cfb810238574507629a

feat: Improve handling of clock skew (#858)

* Allow up to 60 seconds of skew

* Add actionable/helpful error message text.

* 🦉 Updates from OwlBot

See https://github.com/googleapis/repo-automation-bots/blob/main/packages/owl-bot/README.md

Co-authored-by: Owl Bot <gcf-owl-bot[bot]@users.noreply.github.com>
Co-authored-by: arithmetic1728 <58957152+arithmetic1728@users.noreply.github.com>

google/auth/jwt.py

diff --git a/google/auth/jwt.py b/google/auth/jwt.py
index d931bf7..1bc7e5e 100644
--- a/google/auth/jwt.py
+++ b/google/auth/jwt.py
@@ -190,7 +190,11 @@
     # for clock skew.
     earliest = iat - _helpers.CLOCK_SKEW_SECS
     if now < earliest:
-        raise ValueError("Token used too early, {} < {}".format(now, iat))
+        raise ValueError(
+            "Token used too early, {} < {}. Check that your computer's clock is set correctly.".format(
+                now, iat
+            )
+        )
 
     # Make sure the token wasn't issued in the past.
     exp = payload["exp"]