[Bug] fix misusing ACCESS_TOKEN_EXPIRE_MINUTES in jwt on exp

11 months ago · 4b2c8ba204
parent f6641c0f41
commit 4b2c8ba204
1 changed files with 1 additions and 1 deletions
--- a/api/controllers/web/passport.py
+++ b/api/controllers/web/passport.py
@ -163,7 +163,7 @@ def exchange_token_for_existing_web_user(app_code: str, enterprise_user_decoded:
        )
        db.session.add(end_user)
        db.session.commit()
-    exp_dt = datetime.now(UTC) + timedelta(hours=dify_config.ACCESS_TOKEN_EXPIRE_MINUTES * 24)
+    exp_dt = datetime.now(UTC) + timedelta(minutes=dify_config.ACCESS_TOKEN_EXPIRE_MINUTES)
    exp = int(exp_dt.timestamp())
    payload = {
        "iss": site.id,