Skip to content

Fix --duration flag being ignored#68

Merged
Link- merged 4 commits into
Link-:mainfrom
gpailler:fix/jwt-expiry-clock-drift
Mar 23, 2026
Merged

Fix --duration flag being ignored#68
Link- merged 4 commits into
Link-:mainfrom
gpailler:fix/jwt-expiry-clock-drift

Conversation

@gpailler

Copy link
Copy Markdown
Contributor
  • Reduce default JWT expiry from 10 to 5 minutes, providing a buffer against clock drift that causes GitHub to reject the token with "exp claim is too far in the future"
  • Fix --duration / -d flag being silently ignored due to a name mismatch (c.Int("jwt-expiry") vs flag registered as "duration")

GitHub rejects JWTs with an 'exp' claim more than 10 minutes in the future. With a 10-minute default, even a few seconds of clock drift on the client machine causes intermittent 401 errors. Reducing to 5 minutes provides a comfortable buffer while still being long enough for any practical use.
The code read "jwt-expiry" but the flag is registered as "duration", so the value was always 0 and then default 10 was used.
Also update the flag description to reflect the new default of 5 minutes and remove the part about "useful when using --jwt" because the duration applies to all JWT generation.
Comment thread internal/generate_flags.go Outdated
Comment thread internal/generate.go

@gpailler gpailler left a comment

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Requested changes are applied

Comment thread internal/generate_flags.go Outdated
Comment thread internal/generate.go
@gpailler gpailler changed the title Fix intermittent 401 by reducing default JWT expiry and fix --duration flag Fix --duration flag being ignored Mar 23, 2026
@Link- Link- changed the title Fix --duration flag being ignored Fix --duration flag being ignored Mar 23, 2026

@Link- Link- left a comment

Copy link
Copy Markdown
Owner

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thank you for catching and fixing this

@Link- Link- merged commit 5549b93 into Link-:main Mar 23, 2026
5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants