logic bug

pretix_oidc/auth.py

@@ -101,7 +101,7 @@ class OIDCAuthBackend(BaseAuthBackend):
         if response_state not in oidc_state:
             return [None, None]
 
-        if oidc_state[response_state]["generated_on"] < time.time() + 5 * 60:
+        if oidc_state[response_state]["generated_on"] < time.time() - 5 * 60:
             return [None, None]
 
         request.session["oidc_next_url"] = oidc_state[response_state]["next"]