git.iko.soy/typeable/oauth2-proxy
on master help sign in
Use idToken expiry because that's the time checked for refresh

RefreshSessionIfNeeded checks the token expiry, we want to use the ID token's expiry

commitb895f49c52ef3d37fa4ab55e656b5e279d3237d9 authorBrian Van Klaveren <bvan@slac.stanford.edu> dateTue 12 Feb 2019, 10:32 (8 years ago) parent8083501
1 file changed+1−1
compare with master
unifiedsplit
providers/oidc.go+1−1
providers/oidc.go+1−1
@@ -128,7 +128,7 @@ func (p *OIDCProvider) createSessionState(ctx context.Context, token *oauth2.Tok
128128 IDToken: rawIDToken,
129129 RefreshToken: token.RefreshToken,
130130 CreatedAt: time.Now(),
131− ExpiresOn: token.Expiry,
131+ ExpiresOn: idToken.Expiry,
132132 Email: claims.Email,
133133 User: claims.Subject,
134134 }, nil