fix(mercure): prevent float for exp claim

Grafikart · Nov 1, 2024 · 5ad9dcd · 5ad9dcd
1 parent d821d44
commit 5ad9dcd
Showing 1 changed file with 5 additions and 2 deletions.
diff --git a/src/Infrastructure/Mercure/Subscriber/MercureCookieMiddleware.php b/src/Infrastructure/Mercure/Subscriber/MercureCookieMiddleware.php
@@ -60,8 +60,11 @@ public function setMercureCookie(ResponseEvent $event): void
         // On n'utilise pas la méthode createCookie d'authorization car elle utiliserait la clef secrète publisher
         // On part du clear cookie, pour le modifier et utiliser la clef d'abonnement.
         $cookie = $this->authorization->createClearCookie($request, null)
-            ->withExpires(0)
-            ->withValue($this->tokenFactory->create($channels, null));
+            ->withExpires($exp)
+            ->withValue($this->tokenFactory->create($channels, null, [
+                // We need to set a date without ms to avoid float in "exp"
+                'exp' => new \DateTimeImmutable("@" . $exp->getTimestamp()),
+            ]));
         $response->headers->setCookie($cookie);
     }
 }