Skip to content

Commit bc10e82

Browse files
committed
Prolong available time for logging in to the third party system to 15mins
This should make https://ecamp.sentry.io/issues/3531734868/?project=5912620 way rarer.
1 parent bd00986 commit bc10e82

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

api/src/OAuth/JWTStateOAuth2Client.php

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -31,7 +31,7 @@
3131
* longer-living token and with parts of the cookie available to JavaScript.
3232
*/
3333
class JWTStateOAuth2Client extends OAuth2Client implements OAuth2ClientInterface {
34-
public const JWT_TTL = 300; // seconds, i.e. 5 minutes of validity for the JWT token
34+
public const JWT_TTL = 900; // seconds, i.e. 15 minutes of validity for the JWT token
3535

3636
public function __construct(
3737
AbstractProvider $provider,
@@ -101,7 +101,7 @@ public function redirect(array $scopes = [], array $options = []): RedirectRespo
101101
/**
102102
* Checks the validity of the temporary JWT cookie, and checks that the state parameter is correct.
103103
* Any irregularities would indicate someone tampering with the login system (or someone taking longer
104-
* than 5 minutes to authenticate with the external service...)
104+
* than 15 minutes to authenticate with the external service...)
105105
* After this custom state parameter check, we delegate to the original implementation to finish the OAuth
106106
* flow.
107107
*

0 commit comments

Comments
 (0)