Microservices deployed across containers = clock drifting.
DateTime.Now can differ by 1-4 seconds between services → token validation fails → weird 401 errors.
✔ Use:
DateTime.UtcNow
Even better:
ISystemClock clock
💡 Hidden Detail
JWT validation is extremely sensitive to skew.
Use:
ClockSkew = TimeSpan.FromMinutes(2)