Open YoitoFes opened 2 years ago
According to RFC6749, expires_in in OAuth2 Token is the lifetime in seconds of the access token.
expires_in
But mockoidc set MockOIDC.AccessTTL directly to expires_in, making expires_in huge; e.g. if AccessTTL = 10 * time.Seconds (1000000000 int64), expires_in becomes 10000000000 in seconds.
tr := &tokenResponse{ RefreshToken: req.Form.Get("refresh_token"), TokenType: "bearer", ExpiresIn: m.AccessTTL, }
According to RFC6749,
expires_in
in OAuth2 Token is the lifetime in seconds of the access token.But mockoidc set MockOIDC.AccessTTL directly to
expires_in
, makingexpires_in
huge; e.g. if AccessTTL = 10 * time.Seconds (1000000000 int64),expires_in
becomes 10000000000 in seconds.