@melaya/runner 1.1.25 → 1.1.26
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/browserGrantVerify.js +10 -4
- package/package.json +1 -1
|
@@ -143,10 +143,16 @@ export function loadPinnedPublicKeysFromEnv() {
|
|
|
143
143
|
// Verifier
|
|
144
144
|
// ---------------------------------------------------------------------
|
|
145
145
|
export const DEFAULT_CLOCK_TOLERANCE_SECONDS = 30;
|
|
146
|
-
/** Sanity ceiling:
|
|
147
|
-
* token claiming a
|
|
148
|
-
*
|
|
149
|
-
|
|
146
|
+
/** Sanity ceiling: MUST match the server's MAX_TTL_SECONDS
|
|
147
|
+
* (server/src/services/browser/browserGrant.ts). A "valid" token claiming a
|
|
148
|
+
* longer life than the issuer can mint is forged or corrupt, so it is
|
|
149
|
+
* rejected regardless of signature.
|
|
150
|
+
*
|
|
151
|
+
* Raised 900s -> 4h alongside the server. Because this half ships in the
|
|
152
|
+
* runner, a server deployed ahead of a runner republish would mint grants
|
|
153
|
+
* this rejects with claims_invalid — publish the runner before, or at the
|
|
154
|
+
* same time as, the server change. */
|
|
155
|
+
const MAX_LIFETIME_SECONDS = 4 * 60 * 60;
|
|
150
156
|
function b64urlJson(part, what) {
|
|
151
157
|
let buf;
|
|
152
158
|
try {
|