From 12d70bc59de2a64f7f13a36a7f758fe81d02f027 Mon Sep 17 00:00:00 2001 From: Shuo Wu <60160041+shuowu-okta@users.noreply.github.com> Date: Tue, 6 Sep 2022 12:57:18 -0400 Subject: [PATCH] doc: add warning for ignoreLifetime option (#1295) OKTA-527833 doc: add warning for ignoreLifetime option --- README.md | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index f06d31d24..8b8a94eaf 100644 --- a/README.md +++ b/README.md @@ -471,8 +471,9 @@ Defaults to 300 (five minutes). This is the maximum difference allowed between a #### `ignoreLifetime` -Token lifetimes are validated using the `maxClockSkew`. -To override this and disable token lifetime validation, set this value to `true`. +> :warning: This option disables token lifetime validation, which can introduce security vulnerability issues. This option should be used for testing purpose. Please handle the error in your own app for production environment. + +Token lifetimes are validated using the [maxClockSkew](#maxClockSkew). To override this and disable token lifetime validation, set this value to `true`. #### `transformAuthState`