✨ Separation of voting session time and bearer token lifetime (#57)

Parent issue: sequentech/meta#762
sequentech · Jul 15, 2024 · 1546f36 · 1546f36
1 parent 0e980bc
commit 1546f36
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/khmac_gen.py b/khmac_gen.py
@@ -21,12 +21,16 @@
 import hmac
 
 def get_auth_khmac(secret, userid, obj_type, obj_id, perm):
+    now = int(time.time())
+    expiry = now + 300
     message = ":".join([
         userid,
         obj_type,
         obj_id,
         perm,
-        str(int(time.time()))])
+        str(expiry),
+        "timeout-token",
+        str(now)])
     return get_khmac(secret, message)
 
 def get_khmac(secret, message):