misc(IDToken): Increase default max_age constant (token timeout)

anvilresearch · May 26, 2018 · c1c08b0 · c1c08b0
1 parent 306b818
commit c1c08b0
Show file tree

Hide file tree

Showing 4 changed files with 6 additions and 6 deletions.
diff --git a/src/AccessToken.js b/src/AccessToken.js
@@ -5,7 +5,7 @@ const {JWT} = require('@trust/jose')
 const crypto = require('@trust/webcrypto')
 const AccessTokenSchema = require('./schemas/AccessTokenSchema')
 
-const DEFAULT_MAX_AGE = 3600  // Default Access token expiration, in seconds
+const DEFAULT_MAX_AGE = 1209600  // Default Access token expiration, in seconds
 const DEFAULT_SIG_ALGORITHM = 'RS256'
 
 /**

diff --git a/src/IDToken.js b/src/IDToken.js
@@ -6,7 +6,7 @@ const base64url = require('base64url')
 const {JWT} = require('@trust/jose')
 const IDTokenSchema = require('./schemas/IDTokenSchema')
 
-const DEFAULT_MAX_AGE = 3600  // Default ID token expiration, in seconds
+const DEFAULT_MAX_AGE = 1209600  // Default ID token expiration, in seconds
 const DEFAULT_SIG_ALGORITHM = 'RS256'
 
 /**

diff --git a/test/AccessTokenSpec.js b/test/AccessTokenSpec.js
@@ -32,7 +32,7 @@ describe('AccessToken', () => {
   var provider
 
   before(function () {
-    this.timeout(5000)
+    this.timeout(10000)
 
     let configPath = path.join(__dirname, 'config', 'provider.json')
 
@@ -82,7 +82,7 @@ describe('AccessToken', () => {
         return AccessToken.issueForRequest(request, response)
           .then(res => {
             expect(res['token_type']).to.equal('Bearer')
-            expect(res['expires_in']).to.equal(3600)
+            expect(res['expires_in']).to.equal(1209600)
 
             return JWT.decode(res['access_token'])
           })
@@ -115,7 +115,7 @@ describe('AccessToken', () => {
         return AccessToken.issueForRequest(request, response)
           .then(res => {
             expect(res['token_type']).to.equal('Bearer')
-            expect(res['expires_in']).to.equal(3600)
+            expect(res['expires_in']).to.equal(1209600)
 
             return JWT.decode(res['access_token'])
           })

diff --git a/test/handlers/AuthenticationRequestSpec.js b/test/handlers/AuthenticationRequestSpec.js
@@ -925,7 +925,7 @@ describe('AuthenticationRequest', () => {
       return request.allow(request)
         .then(response => {
           expect(response.token_type).to.equal('Bearer')
-          expect(response.expires_in).to.equal(3600)
+          expect(response.expires_in).to.equal(1209600)
           expect(response.id_token).to.exist()
           expect(response.id_token.split('.').length).to.equal(3)
           expect(response.access_token).to.exist()