From 4ff8cdf8264271a91352170bdfb804c8c7a9f9cc Mon Sep 17 00:00:00 2001
From: Tim Biermann <tbier@posteo.de>
Date: Thu, 14 Aug 2025 08:57:05 +0200
Subject: [PATCH] Fix token lifetime, closes #35230 (#35271)

This is an attempt to fix #35230 as discussed in the ticket.
---
 services/actions/auth.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/services/actions/auth.go b/services/actions/auth.go
index 12a8fba53f4..c742e19c601 100644
--- a/services/actions/auth.go
+++ b/services/actions/auth.go
@@ -53,7 +53,7 @@ func CreateAuthorizationToken(taskID, runID, jobID int64) (string, error) {
 
 	claims := actionsClaims{
 		RegisteredClaims: jwt.RegisteredClaims{
-			ExpiresAt: jwt.NewNumericDate(now.Add(24 * time.Hour)),
+			ExpiresAt: jwt.NewNumericDate(now.Add(1*time.Hour + setting.Actions.EndlessTaskTimeout)),
 			NotBefore: jwt.NewNumericDate(now),
 		},
 		Scp:    fmt.Sprintf("Actions.Results:%d:%d", runID, jobID),