[davidliu]

Summary

TokenSourceResponse.hasValidToken(tolerance, date) had two problems:

• date was never read. A fresh Date() was used for every comparison.
• tolerance was applied past exp, so a cached token stayed valid for 60 seconds after it expired and was handed to Room.connect, which the server rejects.

The tolerance is now a refresh margin: a token within tolerance of exp is reported invalid so the caching source fetches a fresh one. This matches isResponseTokenValid in client-sdk-js and hasValidToken(withTolerance:) in client-sdk-swift, both of which have always subtracted the margin.

Tests

• tokenBeforeNbfIsInvalid and tokenAfterExpIsInvalid asserted true and only passed because date was ignored. They now assert false.
• Two new tests pin the window against the default tolerance: 30 seconds before exp is invalid, 90 seconds before is valid.

CachingTokenSourceTest passes (9 tests), spotlessCheck passes.

Behaviour change

The default validator used by cached() now refetches tokens with under 60 seconds left instead of serving them from cache. Apps that passed their own date will now see it honoured.

🤖 Generated with Claude Code

[changeset-bot]

🦋 Changeset detected

Latest commit: 5b78c5e

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 1 package

Name	Type
client-sdk-android	Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

[devin-ai-integration]

✅ Devin Review: No Issues Found

Devin Review analyzed this PR and found no bugs or issues to report.

[github-actions]

Diffuse output:

OLD: diffuse-source-file
NEW: livekit-android-sdk-release.aar

 AAR      │ old      │ new      │ diff  
──────────┼──────────┼──────────┼───────
      jar │  3.1 MiB │  3.1 MiB │ -48 B 
 manifest │  1.5 KiB │  1.5 KiB │   0 B 
 lint-jar │ 12.7 KiB │ 12.7 KiB │   0 B 
    other │  2.4 KiB │  2.4 KiB │   0 B 
──────────┼──────────┼──────────┼───────
    total │  3.1 MiB │  3.1 MiB │ -48 B 

 JAR     │ old   │ new   │ diff       
─────────┼───────┼───────┼────────────
 classes │  1771 │  1771 │  0 (+0 -0) 
 methods │ 22472 │ 22470 │ -2 (+0 -2) 
  fields │  5910 │  5910 │  0 (+0 -0)

AAR

 size    │ diff  │ path          
─────────┼───────┼───────────────
 3.1 MiB │ -48 B │ ∆ classes.jar 
─────────┼───────┼───────────────
 3.1 MiB │ -48 B │ (total)

JAR

METHODS:

   old   │ new   │ diff       
  ───────┼───────┼────────────
   22472 │ 22470 │ -2 (+0 -2) 
  
  - java.util.Date <init>(long)
  - java.util.Date after(Date) → boolean