Weatherkit Rest API returns 401 if JWT timestamp is off by 10 minutes

I am using the Weatherkit Rest API successfully for Android. But I noticed that when I create a JSON Web Token with a timestamp for Issued at (iat) which is off by 10 minutes in the future then the Rest API returns 401 not authorized. Well if the time of the users device is off by 10 minutes for some reason then the request will not work.

Can someone confirm this? Any solution how to prevent this?