Confluence page_updated webhook jwt authentication problem

Recently we have faced issue with expired jwt which comes with page_updaed webhook. Example: “com.atlassian.jwt.exception.JwtExpiredException: Expired at Thu Apr 01 06:52:17 UTC 2021 and time is now Thu Apr 01 06:58:02 UTC 2021 (30 seconds leeway is allowed)”. It is not a permanent problem but it repeats for different hosts and only with webhooks. The problem started happening since March 29 and we still notice it.

@ykleshchenok,

A while back, I gave a talk on common problems about JWT:

Back then, I was already warning about clock drift (about 10 mins in). Do you already have mitigation for that in place?