question: value of access.expires?

[paulswartz]

oidcc version

3.1.0-beta.2

Erlang version

26.0.3

Elixir version

1.15.4

Summary

There's a discrepancy between the documentation and the implementation for the expires value of an access token.

I don't have a strong feeling about which one should be correct

Current behavior

The documentation for oidc_token.access() says that expires is the timestamp when the token expires.

However, the implementation seems to use a number of seconds the token is valid.

How to reproduce

• Get an access token
• See that the value for expires is generally under 1000, which is not a timestamp.

Expected behavior

I don't have a strong opinion about which one is correct, but it's probably easier to update the documentation than the code.

[maennchen]

@paulswartz The implementation is just passing through the value, which i believe is expected when reading the OpenID specification.

I therefore prefer adjusting the docs.