diff --git a/Program.cs b/Program.cs
index 7443060..f7a0092 100644
--- a/Program.cs
+++ b/Program.cs
@@ -54,7 +54,11 @@ builder.Services.AddAuthentication(JwtBearerDefaults.AuthenticationScheme)
             ValidAudience = DomainName,
             IssuerSigningKey = new SymmetricSecurityKey(
                 Encoding.UTF8.GetBytes(JwtSecret)
-            )
+            ),
+            // disable clock skew
+            // https://stackoverflow.com/a/46231102
+            // https://stackoverflow.com/a/47155318
+            ClockSkew = TimeSpan.Zero
         };
     });