From 76ae518d56277a013bf06b5a8687aff4a7dfbf7f Mon Sep 17 00:00:00 2001
From: Joe Grandja <10884212+jgrandja@users.noreply.github.com>
Date: Wed, 4 Jun 2025 06:10:20 -0400
Subject: [PATCH] Increase request_uri expiry for OAuth2 Pushed Authorization
 Request

Closes gh-2024
---
 .../authentication/OAuth2PushedAuthorizationRequestUri.java     | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/oauth2-authorization-server/src/main/java/org/springframework/security/oauth2/server/authorization/authentication/OAuth2PushedAuthorizationRequestUri.java b/oauth2-authorization-server/src/main/java/org/springframework/security/oauth2/server/authorization/authentication/OAuth2PushedAuthorizationRequestUri.java
index 036c41f3..76641862 100644
--- a/oauth2-authorization-server/src/main/java/org/springframework/security/oauth2/server/authorization/authentication/OAuth2PushedAuthorizationRequestUri.java
+++ b/oauth2-authorization-server/src/main/java/org/springframework/security/oauth2/server/authorization/authentication/OAuth2PushedAuthorizationRequestUri.java
@@ -44,7 +44,7 @@ final class OAuth2PushedAuthorizationRequestUri {
 	private Instant expiresAt;
 
 	static OAuth2PushedAuthorizationRequestUri create() {
-		return create(Instant.now().plusSeconds(30));
+		return create(Instant.now().plusSeconds(300));
 	}
 
 	static OAuth2PushedAuthorizationRequestUri create(Instant expiresAt) {