Feat: set webapi token exp. to 15 min and refresh when 4 min left

gen3/test/bootstrapTest.sh

@@ -12,7 +12,7 @@ test_bootstrap_fenceconfig() {
     because $? "secret template exists and is valid yaml: $secretConf"
   [[ -f "$publicConf" ]] && yq -r . < "$secretConf" > /dev/null;
     because $? "public template exists and is valid yaml: $secretConf"
-  python3.8 "$GEN3_HOME/apis_configs/yaml_merge.py" "$publicConf" "$secretConf" | yq -r . > /dev/null;
+  python3.9 "$GEN3_HOME/apis_configs/yaml_merge.py" "$publicConf" "$secretConf" | yq -r . > /dev/null;
     because $? "yaml_perge public private should yield valid yaml"
 }
 

gen3/test/fenceStuffTest.sh

@@ -17,7 +17,7 @@ EOM
 C: 4
 B: 3
 EOM
-  json3="$(python3.8 "$GEN3_HOME/apis_configs/yaml_merge.py" "$yaml1" "$yaml2")"; because $? "yaml_merge should succeed"
+  json3="$(python3.9 "$GEN3_HOME/apis_configs/yaml_merge.py" "$yaml1" "$yaml2")"; because $? "yaml_merge should succeed"
   [[ "1" == "$(jq -r .A <<<"$json3")" ]]; because $? ".A should be 1"
   /bin/rm "$yaml1"
   /bin/rm "$yaml2"

kube/services/ohdsi-atlas/ohdsi-atlas-config-local.yaml

@@ -29,6 +29,7 @@ data:
       configLocal.cohortComparisonResultsEnabled = false;
       configLocal.userAuthenticationEnabled = true;
       configLocal.plpResultsEnabled = false;
+      configLocal.refreshTokenThreshold = 1000 * 60 * 4; // refresh auth token if it will expire within 4 minutes
       return configLocal;
     });
 

kube/services/ohdsi-webapi/ohdsi-webapi-config.yaml

@@ -22,7 +22,7 @@ stringData:
 
   security_cors_enabled: "true"
   security_origin: "*"
-  security_token_expiration: "43200"
+  security_token_expiration: "900"
   security_ssl_enabled: "false"
 
   security_provider: AtlasRegularSecurity