Action token lifespan configuration bug(?)

Configuring the server
1

Hi. I think I’ve found an issue in KeyCloak 20.0.2 related to overriding lifespan of action tokens.

Retrosteps:
Configuration (realm → tokens).

obraz
obraz511×559 10.1 KB

  • I changed “execute actions” value to 2 days and saved config
  • I’m calling KeyCloak API endpoint /execute-actions-email
  • I receive an email

AS IS:
The email contains a link with token which is valid for 5 hours.

TO BE:
The email contains a link with token which is valid for 2 days, as set in execute actions input.

2

Someone reported exactly the same issue on github:

3

Gentle bump. Can someone check it out (if this is reproducable for someone)?