From f7cf597f542c82dba472aafafee0e0f483060995 Mon Sep 17 00:00:00 2001
From: Austin Cherry <acherry@cloudflare.com>
Date: Thu, 24 Jan 2019 15:20:36 -0600
Subject: [PATCH] AUTH-1404: reauth if the token is about to expire within 15
 minutes

---
 cmd/cloudflared/token/token.go | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/cmd/cloudflared/token/token.go b/cmd/cloudflared/token/token.go
index 814dce88..e5649b4e 100644
--- a/cmd/cloudflared/token/token.go
+++ b/cmd/cloudflared/token/token.go
@@ -62,7 +62,8 @@ func GetTokenIfExists(url *url.URL) (string, error) {
 		return "", err
 	}
 	ident, err := oidc.IdentityFromClaims(claims)
-	if err == nil && ident.ExpiresAt.After(time.Now()) {
+	// AUTH-1404, reauth if the token is about to expire within 15 minutes
+	if err == nil && ident.ExpiresAt.After(time.Now().Add(time.Minute*15)) {
 		return token.Encode(), nil
 	}
 	return "", err