Merge pull request #828 from google/issue-827-add-leeway

adds 1-second leeway to JWT validation to prevent intermittent except…

Author: bshaffer

src/Google/AccessToken/Verify.php

@@ -189,10 +189,15 @@ private function getFederatedSignOnCerts()
 
   private function getJwtService()
   {
+    $jwtClass = 'JWT';
     if (class_exists('\Firebase\JWT\JWT')) {
-      return new \Firebase\JWT\JWT;
+      $jwtClass = 'Firebase\JWT\JWT';
     }
 
-    return new \JWT;
+    // adds 1 second to JWT leeway
+    // @see https://github.com/google/google-api-php-client/issues/827
+    $jwtClass::$leeway = 1;
+
+    return new $jwtClass;
   }
 }