e098045a92
* WIP * Fix JWTs for auth-durations less than 5 mins For auth-duration = 0 the JWT now understands that there does not need to be duration checks. For auth-duration < 5 minutes > 0 the JWT lifespan will be 1/2 of auth-duration to allow one extension There is likely a range of very short auth-duration times like, say, less than 5 seconds that would never allow a person to login simply because the time of issue and request is longer. * Update changelog |
||
|---|---|---|
| .. | ||
| cookies.go | ||
| cookies_test.go | ||
| doc.go | ||
| generic.go | ||
| generic_test.go | ||
| github.go | ||
| github_test.go | ||
| google.go | ||
| google_test.go | ||
| heroku.go | ||
| heroku_test.go | ||
| jwt.go | ||
| jwt_test.go | ||
| mux.go | ||
| mux_test.go | ||
| oauth2.go | ||
| oauth2_test.go | ||
| time.go | ||