Passport and Octane

[DeepDiver1975]

Background

Passport::tokensExpireIn, Passport::refreshTokensExpireIn and Passport::personalAccessTokensExpireIn use explicit datetimes.
These methods are usually called in AuthServiceProvider.

Problem

With octane service providers are called once on startup which means that the explicit expiry datetimes are sent on startup and never being updated. As a result the longer an octane instance runs the shorter the token lifetimes get.

Solution

Define a listener and set it up in config/octane.php

class ResetPassportTokenLifetimes
{
    public function handle($event): void
    {
        Passport::tokensExpireIn(now()->addMonths(6));
        Passport::refreshTokensExpireIn(now()->addMonth(12));
        Passport::personalAccessTokensExpireIn(now()->addMonths(6));
    }
}

    'listeners' => [
        # ....
        RequestReceived::class => [
            ...Octane::prepareApplicationForNextOperation(),
            ...Octane::prepareApplicationForNextRequest(),
            ResetPassportTokenLifetimes::class,
        ],

Alternative approach

An event handler like this could be added to octane similar to Livewire .... laravel/octane#400

[DeepDiver1975]

... or teach passport to work with DateInterval instead of DateTime ....