Ryan Richard 01d6bdb497 CLI deciding if token exchange needed should not look at ID token expiry ...

This fixes a small mistake in PR #1864. When the "pinniped login oidc"
CLI command is deciding if the RFC8693 token exchange is needed, it
should not look at the expiry of the ID token. This mistake would cause
the RFC8693 token exchange to happen when the OIDC provider is not
a Pinniped Supervisor, which would fail because most other providers
do not support that type of token exchange.

It does not matter if the current ID token is close to expiring when
deciding if the RFC8693 token exchange is needed, because the token
exchange is going to yield a new ID token anyway. It does matter if the
current ID token is close to expiring if the CLI decides that it is
not going to perform the token exchange, and this commit does not change
that logic.

2024-02-23 08:37:01 -08:00

..

conciergeclient

Upgrade the linter and fix all new linter warnings

2022-08-24 14:45:55 -07:00

oidcclient

CLI deciding if token exchange needed should not look at ID token expiry

2024-02-23 08:37:01 -08:00