Hi Scott. Try setting the leeway for the jwt-php package, as instructed here:
It seems that the php-jwt library uses the “iat” (issued at) claim to validate when the token is valid from. There’s a bit of a controversy around this, as many feel that the “nbf” (not before) claim should be used for that validation (if present), and treat “iat” as merely informative. In any case, setting the leeway should work as a valid workaround.