Merge pull request #3 from geoblocks/fix_leeway

Fix leeway

Author: gberaudo

package-lock.json

@@ -1,6 +1,6 @@
 {
   "name": "@geoblocks/oidcjs",
-  "version": "0.5.9",
+  "version": "0.5.10",
   "description": "A simple OpenID Connect client typescript implementation",
   "scripts": {
     "start": "python3 -m http.server 8000 --bind localhost",
@@ -16,7 +16,7 @@
   "main": "lib/index.js",
   "types": "lib/types/index.d.ts",
   "devDependencies": {
-    "@biomejs/biome": "1.7.0",
-    "typescript": "5.4.5"
+    "@biomejs/biome": "1.8.2",
+    "typescript": "5.5.2"
   }
 }

package.json

@@ -324,8 +324,11 @@ export class CodeOIDCClient {
     if (!payload) {
       return false;
     }
-    // Add 30 seconds to the expiration time to account for clock skew
-    return payload.exp + 30 > Date.now() / 1000;
+    // Substract 30 seconds to the token expiration time
+    // to eagerly renew the token and give us some margin.
+    // This is necessary to account of clock discrepency between client and server.
+    // Ideally, the server also tolerate some leeway.
+    return payload.exp - 30 > Date.now() / 1000;
   }
 
   async getActiveToken(): Promise<string> {