ソースを参照

Increase request_uri expiry for OAuth2 Pushed Authorization Request

Closes gh-2024
Joe Grandja 2 ヶ月 前
コミット
76ae518d56

+ 1 - 1
oauth2-authorization-server/src/main/java/org/springframework/security/oauth2/server/authorization/authentication/OAuth2PushedAuthorizationRequestUri.java

@@ -44,7 +44,7 @@ final class OAuth2PushedAuthorizationRequestUri {
 	private Instant expiresAt;
 
 	static OAuth2PushedAuthorizationRequestUri create() {
-		return create(Instant.now().plusSeconds(30));
+		return create(Instant.now().plusSeconds(300));
 	}
 
 	static OAuth2PushedAuthorizationRequestUri create(Instant expiresAt) {