providers/oauth2: use access_code_validity for id_tokens generated when using an implicit flow, improve wording in web ui

closes #1369 Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-09-15 17:14:53 +02:00
parent 95efd47f65
commit 916530f0d8
5 changed files with 40 additions and 13 deletions
--- a/authentik/providers/oauth2/tests/test_authorize.py
+++ b/authentik/providers/oauth2/tests/test_authorize.py
@ -247,7 +247,7 @@ class TestAuthorize(OAuthTestCase):
                "to": (
                    f"http://localhost#access_token={token.access_token}"
                    f"&id_token={provider.encode(token.id_token.to_dict())}&token_type=bearer"
-                    f"&expires_in=2592000&state={state}"
+                    f"&expires_in=60&state={state}"
                ),
            },
        )