One should be able to set the lifetime of a JWT when using the make_openid_request function.

Author: rohe

src/oidcmsg/oidc/__init__.py

@@ -1157,7 +1157,8 @@ def factory(msgtype, **kwargs):
     return oauth2.factory(msgtype, **kwargs)
 
 
-def make_openid_request(arq, keys, issuer, request_object_signing_alg, recv, with_jti=False):
+def make_openid_request(arq, keys, issuer, request_object_signing_alg, recv, with_jti=False,
+                        lifetime=0):
     """
     Construct the JWT to be passed by value (the request parameter) or by
     reference (request_uri).
@@ -1169,12 +1170,15 @@ def make_openid_request(arq, keys, issuer, request_object_signing_alg, recv, wit
     :param request_object_signing_alg: Which signing algorithm to use
     :param recv: The intended receiver of the request
     :param with_jti: Whether a JTI should be included in the JWT.
+    :param lifetime: How long the JWT is expect to be live.
     :return: JWT encoded OpenID request
     """
 
     _jwt = JWT(key_jar=keys, iss=issuer, sign_alg=request_object_signing_alg)
     if with_jti:
         _jwt.with_jti = True
+    if lifetime:
+        _jwt.lifetime = lifetime
     return _jwt.pack(arq.to_dict(), owner=issuer, recv=recv)