diff --git a/pkg/client/rp/verifier.go b/pkg/client/rp/verifier.go index e5c9f42..75d149b 100644 --- a/pkg/client/rp/verifier.go +++ b/pkg/client/rp/verifier.go @@ -141,7 +141,7 @@ func WithIssuedAtOffset(offset time.Duration) func(*idTokenVerifier) { // WithIssuedAtMaxAge provides the ability to define the maximum duration between iat and now func WithIssuedAtMaxAge(maxAge time.Duration) func(*idTokenVerifier) { return func(v *idTokenVerifier) { - v.maxAge = maxAge + v.maxAgeIAT = maxAge } } diff --git a/pkg/client/rp/verifier_test.go b/pkg/client/rp/verifier_test.go index 28c9ded..b80ef22 100644 --- a/pkg/client/rp/verifier_test.go +++ b/pkg/client/rp/verifier_test.go @@ -310,7 +310,7 @@ func TestNewIDTokenVerifier(t *testing.T) { keySet: tu.KeySet{}, options: []VerifierOption{ WithIssuedAtOffset(time.Minute), - //WithIssuedAtMaxAge(time.Hour), + WithIssuedAtMaxAge(time.Hour), WithNonce(nil), // otherwise assert.Equal will fail on the function WithACRVerifier(nil), WithAuthTimeMaxAge(2 * time.Hour), @@ -318,9 +318,9 @@ func TestNewIDTokenVerifier(t *testing.T) { }, }, want: &idTokenVerifier{ - issuer: tu.ValidIssuer, - offset: time.Minute, - //maxAgeIAT: time.Hour, // Maybe BUG? + issuer: tu.ValidIssuer, + offset: time.Minute, + maxAgeIAT: time.Hour, clientID: tu.ValidClientID, keySet: tu.KeySet{}, nonce: nil,