\Jumbojett\OpenIDConnectClient::$leeway is not overrideable

[timoschinkel]

The value for \Jumbojett\OpenIDConnectClient::$leeway is fixated to 300 seconds. Although exposed outwards using \Jumbojett\OpenIDConnectClient::getLeeway() there is no way to manipulate the value for leeway.

Is this deliberate? We are in control of all of our servers and we are interested in lowering the leeway. I think that there are three ways to do this without too much changes codewise:

1. Make \Jumbojett\OpenIDConnectClient::$leeway protected
2. Introduce a public or protected \Jumbojett\OpenIDConnectClient::setLeeway() method
3. Use \Jumbojett\OpenIDConnectClient::getLeeway() internally

So my questions:

• Are you open to allow adjusting the leeway?
• If so, do you prefer one of the proposed solutions?
• If so, do you want me to create a pull request for this?