From d08510ebe4f04255cae894974dfc2a032f895733 Mon Sep 17 00:00:00 2001
From: Sheen Capadngan <sheensantoscapadngan@gmail.com>
Date: Wed, 28 May 2025 16:24:23 +0800
Subject: [PATCH] misc: add proper grace period for max ttl and descriptive
 comment

---
 backend/src/services/identity-ua/identity-ua-service.ts | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/backend/src/services/identity-ua/identity-ua-service.ts b/backend/src/services/identity-ua/identity-ua-service.ts
index 69a54d2cc..53404788e 100644
--- a/backend/src/services/identity-ua/identity-ua-service.ts
+++ b/backend/src/services/identity-ua/identity-ua-service.ts
@@ -122,7 +122,9 @@ export const identityUaServiceFactory = ({
           }
         : {
             accessTokenTTL: identityUa.accessTokenPeriod,
-            accessTokenMaxTTL: identityUa.accessTokenPeriod
+            // Setting Max TTL to 2 × period ensures that clients can always renew their token
+            // at least once, and matches client logic that checks if renewing would exceed Max TTL.
+            accessTokenMaxTTL: 2 * identityUa.accessTokenPeriod
           };
 
     const identityAccessToken = await identityUaDAL.transaction(async (tx) => {