DEFAULT_REFRESH_SKEW_MS

@forge/monorepo / backend/src / DEFAULT_REFRESH_SKEW_MS

Variable: DEFAULT_REFRESH_SKEW_MS

const DEFAULT_REFRESH_SKEW_MS: 60000 = 60_000

Defined in: backend/src/tools/credentials.ts:366

How early a token is replaced.

Sixty seconds, and the number is a commitment rather than a guess: a tool call can take tens of seconds — a slow vendor, a large upload, a retry — and a token that was valid when the call started must still be valid when it arrives. Refreshing exactly at expiry makes "expired mid-flight" the common case rather than the rare one, and that failure looks like an intermittent authentication bug.

AC-5. Configurable because a deployment whose calls are slower than this needs more.