fix(auth): enforce Keycloak access token age

2026-08-05 17:15:53 +08:00
parent 41bf5e9d92
commit 78135c8a50
4 changed files with 58 additions and 3 deletions
@@ -48,6 +48,7 @@ class Settings(BaseSettings):
    KEYCLOAK_PUBLIC_KEY: str = ""
    KEYCLOAK_ALGORITHM: str = "RS256"
    KEYCLOAK_AUDIENCE: str = ""
+    KEYCLOAK_ACCESS_TOKEN_MAX_AGE_SECONDS: int = 900

    # Bocha Web Search API
    BOCHA_API_KEY: str = ""