feat(oidc): per-client custom token lifespans (#5741)

This allows configuring custom lifespans for individual clients. The lifespans can be completely separate per-client, and be individually tuned for each particular token type and grant type.

Signed-off-by: James Elliott <james-d-elliott@users.noreply.github.com>

1 files changed, 32 insertions, 0 deletions

diff --git a/internal/configuration/deprecation.go b/internal/configuration/deprecation.go
index b8e9d472e..eb261ddd3 100644
--- a/internal/configuration/deprecation.go
+++ b/internal/configuration/deprecation.go
@@ -326,4 +326,36 @@ var deprecations = map[string]Deprecation{
 		MapFunc: nil,
 		ErrFunc: nil,
 	},
+	"identity_providers.oidc.access_token_lifespan": {
+		Version: model.SemanticVersion{Major: 4, Minor: 38},
+		Key:     "identity_providers.oidc.access_token_lifespan",
+		NewKey:  "identity_providers.oidc.lifespans.access_token",
+		AutoMap: true,
+		MapFunc: nil,
+		ErrFunc: nil,
+	},
+	"identity_providers.oidc.authorize_code_lifespan": {
+		Version: model.SemanticVersion{Major: 4, Minor: 38},
+		Key:     "identity_providers.oidc.authorize_code_lifespan",
+		NewKey:  "identity_providers.oidc.lifespans.authorize_code",
+		AutoMap: true,
+		MapFunc: nil,
+		ErrFunc: nil,
+	},
+	"identity_providers.oidc.id_token_lifespan": {
+		Version: model.SemanticVersion{Major: 4, Minor: 38},
+		Key:     "identity_providers.oidc.id_token_lifespan",
+		NewKey:  "identity_providers.oidc.lifespans.id_token",
+		AutoMap: true,
+		MapFunc: nil,
+		ErrFunc: nil,
+	},
+	"identity_providers.oidc.refresh_token_lifespan": {
+		Version: model.SemanticVersion{Major: 4, Minor: 38},
+		Key:     "identity_providers.oidc.refresh_token_lifespan",
+		NewKey:  "identity_providers.oidc.lifespans.refresh_token",
+		AutoMap: true,
+		MapFunc: nil,
+		ErrFunc: nil,
+	},
 }