Intermittent 401 "exp claim is too far in the future" due to default 10-minute JWT expiry

[gpailler]

I'm hitting random 401s when running generate on some of our CI agents with the following error: 'Expiration time' claim ('exp') is too far in the future

After some digging, I found two issues:

• The default JWT expiry is 10 minutes, which is exactly GitHub's maximum. If the machine's clock is even a couple seconds behind, GitHub sees the exp as exceeding the limit and rejects it.

• The --duration flag doesn't actually work because the code reads c.Int("jwt-expiry") but the flag is registered as "duration"

I propose #68 to fix both issues.

Thanks 🙏

[Link-]

I propose https://github.com/Link-/gh-token/pull/68 to fix both issues.

This seems to like a fix is needed for this problem:

The --duration flag doesn't actually work because the code reads c.Int("jwt-expiry") but the flag is registered as "duration"

[gpailler]

PR has been updated to fix only the --duration flag that was ignored.

[gpailler]

@Link- Do you plan a 2.0.10 anytime soon with this fix that was merged just after 2.0.9? Thanks 🙏

[Link-]

Yes, it'll go out in a bit

[Link-]

Release is out. Closing