Merge pull request #712 from HugoReeves/HugoReeves-patch-1

Update jwt.helper.js to increase Github JWT Token duration
OWASP · Aug 4, 2023 · 5508341 · 5508341
2 parents 8b9b98e + 45993d6
commit 5508341
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 3 deletions.
diff --git a/td.server/src/helpers/jwt.helper.js b/td.server/src/helpers/jwt.helper.js
@@ -11,11 +11,11 @@ const createAsync = async (providerName, providerOptions, user) => {
     };
     // Explore other options including issuer, scope, etc
     const accessToken = jsonwebtoken.sign({ provider, user }, env.get().config.ENCRYPTION_JWT_SIGNING_KEY, {
-        expiresIn: '5m'
+        expiresIn: '1d'
     });
 
     const refreshToken = jsonwebtoken.sign({ provider, user }, env.get().config.ENCRYPTION_JWT_REFRESH_SIGNING_KEY, {
-        expiresIn: '24h'
+        expiresIn: '7d'
     });
 
     return { accessToken, refreshToken };

diff --git a/td.server/test/helpers/jwt.helper.spec.js b/td.server/test/helpers/jwt.helper.spec.js
@@ -67,7 +67,7 @@ describe('helpers/jwt.helper.js', () => {
                 sinon.match.any,
                 config.ENCRYPTION_JWT_SIGNING_KEY,
                 {
-                    expiresIn: '5m'
+                    expiresIn: '1d'
                 }
             );
         });