diff --git a/pkg/openid/client/client.go b/pkg/openid/client/client.go
index 78dab51..c82eb6d 100644
--- a/pkg/openid/client/client.go
+++ b/pkg/openid/client/client.go
@@ -35,7 +35,7 @@ var (
 )
 
 const (
-	DefaultClientAssertionLifetime = 30 * time.Second
+	DefaultClientAssertionLifetime = 5 * time.Second
 )
 
 type JwksProvider interface {
diff --git a/pkg/openid/client/client_test.go b/pkg/openid/client/client_test.go
index 2792489..d9b1ea7 100644
--- a/pkg/openid/client/client_test.go
+++ b/pkg/openid/client/client_test.go
@@ -24,7 +24,7 @@ func TestClientAuthenticationAssertion(t *testing.T) {
 	openidConfig.TestProvider.SetIssuer("some-issuer")
 	c := newTestClientWithConfig(openidConfig)
 
-	expiry := 30 * time.Second
+	expiry := client.DefaultClientAssertionLifetime
 	jwtAssertion, err := c.ClientAuthenticationAssertion(expiry)
 	assert.NoError(t, err)
 
@@ -102,7 +102,7 @@ func TestClientAuthenticationAssertionHeader(t *testing.T) {
 	openidConfig.TestProvider.SetIssuer("some-issuer")
 	c := newTestClientWithConfig(openidConfig)
 
-	expiry := 30 * time.Second
+	expiry := client.DefaultClientAssertionLifetime
 	jwtAssertion, err := c.ClientAuthenticationAssertion(expiry)
 	assert.NoError(t, err)