CLOUD-3364 - Parse refresh token to determine expire date

[ChristianHersevoort]

No description provided.

[Copilot]

Pull Request Overview

This PR enhances the refresh token handling by parsing the JWT refresh token to extract its actual expiration date instead of using the access token's expiration time as a proxy. The implementation includes a fallback mechanism to maintain backwards compatibility when the refresh token cannot be parsed.

Key Changes:

• Adds JWT parsing capability to extract the refresh token's expiration date from its claims
• Implements a new determineRefreshTokenExpireDate() function with fallback logic
• Adds the github.com/golang-jwt/jwt/v5 dependency for JWT parsing

Reviewed Changes

Copilot reviewed 2 out of 3 changed files in this pull request and generated 1 comment.

File	Description
pkg/aws_keyhub/keyhub.go	Adds JWT parsing logic to extract refresh token expiration from the token's "exp" claim, with fallback to the previous behavior if parsing fails
go.mod	Adds the golang-jwt/jwt/v5 dependency (incorrectly placed in indirect dependencies)
go.sum	Adds checksums for the new JWT library dependency

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[erwinvandenbeld]

Graag ticket er bij