From da4d1048864320765e8251942f5c481dcf46cdf7 Mon Sep 17 00:00:00 2001 From: scanash00 Date: Sat, 15 Aug 2026 18:40:39 -0800 Subject: [PATCH] client assertion fixes --- crates/tranquil-oauth/src/client.rs | 6 +----- 1 file changed, 1 insertion(+), 5 deletions(-) diff --git a/crates/tranquil-oauth/src/client.rs b/crates/tranquil-oauth/src/client.rs index 3cabd23..b9d9f07 100644 --- a/crates/tranquil-oauth/src/client.rs +++ b/crates/tranquil-oauth/src/client.rs @@ -635,11 +635,6 @@ fn validate_client_assertion_times(iat: i64, exp: Option, now: i64) -> Resu "client_assertion has expired".to_string(), )); } - if exp > now + 300 { - return Err(OAuthError::InvalidClient( - "client_assertion lifetime is too long".to_string(), - )); - } } Ok(()) } @@ -883,6 +878,7 @@ mod tests { assert!(validate_client_assertion_times(now, None, now).is_ok()); assert!(validate_client_assertion_times(now, Some(now + 60), now).is_ok()); + assert!(validate_client_assertion_times(now, Some(now + 600), now).is_ok()); assert!(validate_client_assertion_times(now - 61, None, now).is_err()); assert!(validate_client_assertion_times(now, Some(now - 1), now).is_err()); } -- 2.51.2