fix(oidc-proxy): validate exp independently of MAX_TOKEN_AGE_SECONDS (#8832) (#8904)

Signed-off-by: Bright Zheng <bzqzheng@gmail.com>
2026-05-12 14:20:06 -04:00
parent 1dc2749430
commit fe8f0cdec1
2 changed files with 6 additions and 3 deletions
@@ -195,7 +195,9 @@ async function verifyOidcToken(token, env) {
      if (age > parseInt(env.MAX_TOKEN_AGE_SECONDS, 10)) {
        return { valid: false, reason: "Token too old" };
      }
-    } else if (!payload.exp || payload.exp < Date.now() / 1000) {
+    }
+
+    if (!payload.exp || payload.exp < Date.now() / 1000) {
      return { valid: false, reason: "Token expired" };
    }