mirror of
https://github.com/nais/wonderwall.git
synced 2026-05-06 08:27:10 +00:00
f2def8d00d
The default auto-refresh behaviour occurs 5 minutes before tokens expire, at the earliest. Without inactivity however, tokens are still refreshed at any point after this, as long as the session has not ended. This however, means that refreshes don't occur often enough when inactivity timeouts are enabled. In practice, the session is only refreshed if a request is received within the 5 minute leeway window between a token's expiry and the inactivity timeout. This commit will apply auto-refreshes at the half-life of the inactivity timeout instead, so that users' sessions and timeouts are properly extended on activity.