[Scarjit]

No description provided.

[doernemt]

Hi team,
while trying out the SDK (smooth experience in general, nice!) I found 1-2 issues in the auth area.

pubsub-sdk-python/src/pubsub_sdk_python/auth.py

Line 142 in e03fd30

return token, 3600

: it assumes a token lifetime of 3600 seconds. The default is 900 already. I'd recommend sth along the lines of

claims = jwt.decode(token, options={"verify_signature": False})
return token, claims["exp"] - time.time()` to make it adjust to reality.

(see core sdk with the open renewal bug: stackitcloud/stackit-sdk-python#3535)

I think that KeyAuth leaks threads by the way you're using it. The constructor starts a ThreadPoolExecutor with 1 background thread. In your auth.py, _get_token_from_stackit(self) creates a new KeyAuth on EVERY token creation or refresh. This means a lot of KeyAuth threads that are never stopped. You should move that code to the provider level.

Thanks, Tim