search

panva / openid-client

OAuth 2 / OpenID Connect Client API for JavaScript Runtimes
MIT License
1.83k stars 392 forks source link

Exp is not setable in requestObject function #536

Closed yovasx2 closed 2 years ago

yovasx2 commented 2 years ago

Describe the bug Docs says you can set exp for a request object

Expected behaviour overwrite the default 5 min with exp param

The code node_modules/openid-client/lib/client.js:1487 is setting the default but it's not configurable as docs say

panva commented 2 years ago

You can set any claim through the payload argument to literally anything you want, that includes setting exp to an arbitrary value.