From 70e55039beb6e036824f865c1a08fd8b6fafe7a3 Mon Sep 17 00:00:00 2001
From: Cole Kennedy <cole@testifysec.com>
Date: Thu, 3 Sep 2026 12:05:31 -0500
Subject: [PATCH] auth: drop NotBefore and Issuer claims to fix clock-skew
 login failures

---
 internal/auth/jwt.go | 2 --
 1 file changed, 2 deletions(-)

diff --git a/internal/auth/jwt.go b/internal/auth/jwt.go
index bb51d25..d259b56 100644
--- a/internal/auth/jwt.go
+++ b/internal/auth/jwt.go
@@ -87,8 +87,6 @@ func (s *JWTService) generateToken(userID uuid.UUID, email string, groupIDs []st
 		RegisteredClaims: jwt.RegisteredClaims{
 			ExpiresAt: jwt.NewNumericDate(expiresAt),
 			IssuedAt:  jwt.NewNumericDate(now),
-			NotBefore: jwt.NewNumericDate(now),
-			Issuer:    s.issuer,
 			Subject:   userID.String(),
 		},
 	}