diff --git a/changelog.md b/changelog.md index 5b419e9..fa888c0 100644 --- a/changelog.md +++ b/changelog.md @@ -2,6 +2,10 @@ All important changes to this plugin will be documented in this file. +## TODO +### Changed +- Tightened the SSO token verification window from 1 hour to 60 seconds, matching the other LMS plugin implementations + ## [v1.5] - 2021-10-22 ### Added - Ungraded MUMIE Tasks are now supported in Stud.IP. They represent ungraded links to MUMIE articles. diff --git a/services/SSOService.php b/services/SSOService.php index c5e252e..3fa1d55 100644 --- a/services/SSOService.php +++ b/services/SSOService.php @@ -82,7 +82,7 @@ public static function verifyToken($token, $hashedId) if (!is_null($mumieToken) && $mumieToken->token == $token && $userRecord != null) { $current = time(); - if (($current - $mumieToken->timecreated) >= (60*60)) { + if (($current - $mumieToken->timecreated) >= 60) { $response->status = "invalid"; } else { $response->status = "valid";