Add two minute expiration buffer to TTLs

CirrusMD · Feb 3, 2025 · 91d7cee · 91d7cee
1 parent 0e0743a
commit 91d7cee
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 1 deletion.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -3,6 +3,8 @@
 ## 1.2.0 - Pending
 
 - Require Python >=3.9
+- [aws] Add two minute expiration buffer to TTLs to prevent long-running
+  commands from failing by starting the renewal process early.
 
 ## 1.1.0 - 2022-10-18
 

diff --git a/authum/plugins/aws/lib.py b/authum/plugins/aws/lib.py
@@ -67,6 +67,7 @@ class CacheableAWSObject(abc.ABC):
 
     cache: ClassVar[AWSData] = AWSData()
     expiration_timestamp: float = 0
+    expiration_buffer = datetime.timedelta(minutes=2)
 
     @abc.abstractmethod
     def load(self):
@@ -89,7 +90,7 @@ def ttl(self) -> datetime.timedelta:
         except ValueError:
             expiration = now
 
-        return expiration - now
+        return expiration - now - self.expiration_buffer
 
     @property
     def is_expired(self) -> bool: