Merge pull request #67 from opendoor-labs/token-issue-ENGBUGS-52663

ENGBUGS-52663 Enable skip Expiry Check fix
opendoor-labs · Nov 18, 2024 · 2434bb1 · 2434bb1
2 parents 67dbd97 + 4cfb3ff
commit 2434bb1
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/pkg/validation/options.go b/pkg/validation/options.go
@@ -130,6 +130,7 @@ func Validate(o *options.Options) error {
 			o.SetOIDCVerifier(provider.Verifier(&oidc.Config{
 				ClientID:        o.Providers[0].ClientID,
 				SkipIssuerCheck: o.Providers[0].OIDCConfig.InsecureSkipIssuerVerification,
+				SkipExpiryCheck: true,
 			}))
 
 			o.Providers[0].LoginURL = provider.Endpoint().AuthURL
@@ -369,8 +370,7 @@ func parseJwtIssuers(issuers []string, msgs []string) ([]jwtIssuer, []string) {
 // a verifier for that issuer.
 func newVerifierFromJwtIssuer(jwtIssuer jwtIssuer) (*oidc.IDTokenVerifier, error) {
 	config := &oidc.Config{
-		ClientID:        jwtIssuer.audience,
-		SkipExpiryCheck: true,
+		ClientID: jwtIssuer.audience,
 	}
 	// Try as an OpenID Connect Provider first
 	var verifier *oidc.IDTokenVerifier