From 9e50c41b3f2be565a1d95e889812c8bac9984e27 Mon Sep 17 00:00:00 2001
From: Patrick Uiterwijk <patrick@puiterwijk.org>
Date: Jul 13 2022 11:50:43 +0000
Subject: Fix refreshable_until for OpenIDC


This ensures that tokens are refreshable until the time they expire,
instead of being refreshable after refreshable_until time has expired.

Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>

---

diff --git a/ipsilon/providers/openidc/store.py b/ipsilon/providers/openidc/store.py
index 1a3faf7..a96b011 100644
--- a/ipsilon/providers/openidc/store.py
+++ b/ipsilon/providers/openidc/store.py
@@ -212,7 +212,7 @@ class OpenIDCStore(Store):
             return None
 
         if token.get('refreshable_until') and \
-                int(token['refreshable_until']) >= int(time.time()):
+                int(token['refreshable_until']) < int(time.time()):
             return None
 
         token_security_check = generate_random_secure_string()