Unpin JWT and use integer IAT values

PyJWT 2.6.0 began performing validation of iat (issued at) claims
in https://github.com/jpadilla/pyjwt/commit/9cb9401cc579f11dbb17181e8713f061f8e40ed4

I believe the intent of RFC7519 is to support any numeric values
(including floating point) for iat, nbf, and exp, however, the
PyJWT library has made the assumption that the values should be
integers, and therefore when we supply an iat with decimal seconds,
PyJWT will round down when validating the value. In our unit tests,
this can cause validation errors.

In order to avoid any issues, we will round down the times that
we supply when generating JWT tokens and supply them as integers
in accordance with the robustness principle.

Change-Id: Ia8341b4d5de827e2df8878f11f2d1f52a1243cd4

1 files changed, 1 insertions, 1 deletions

diff --git a/zuul/cmd/client.py b/zuul/cmd/client.py
index 98dd56b9d..031b10a1e 100755
--- a/zuul/cmd/client.py
+++ b/zuul/cmd/client.py
@@ -735,7 +735,7 @@ class Client(zuul.cmd.ZuulApp):
             print('"%s" authenticator configuration not found.'
                   % self.args.auth_config)
             sys.exit(1)
-        now = time.time()
+        now = int(time.time())
         token = {'iat': now,
                  'exp': now + self.args.expires_in,
                  'iss': get_default(self.config, auth_section, 'issuer_id'),