diff --git a/internal/oauth/token.go b/internal/oauth/token.go
index 36685f3..7613f34 100644
--- a/internal/oauth/token.go
+++ b/internal/oauth/token.go
@@ -5,6 +5,7 @@ import (
 	"encoding/json"
 	"fmt"
 	"log"
+	"math"
 	"net/http"
 	"strings"
 	"time"
@@ -236,7 +237,7 @@ func (h *OAuthHandler) tokenEndpoint(w http.ResponseWriter, r *http.Request) {
 			TokenType:    "Bearer",
 			AccessToken:  access.Token,
 			RefreshToken: refresh.Token,
-			ExpiresIn:    access.ExpiresAt.Sub(time.Now()).Seconds(),
+			ExpiresIn:    math.Ceil(access.ExpiresAt.Sub(time.Now()).Seconds()),
 			Email:        user.Email,
 		}
 
@@ -328,7 +329,7 @@ func (h *OAuthHandler) tokenEndpoint(w http.ResponseWriter, r *http.Request) {
 			TokenType:    "Bearer",
 			AccessToken:  access.Token,
 			RefreshToken: refresh.Token,
-			ExpiresIn:    access.ExpiresAt.Sub(time.Now()).Seconds(),
+			ExpiresIn:    math.Ceil(access.ExpiresAt.Sub(time.Now()).Seconds()),
 		}
 
 		log.Printf("DEBUG: refresh - sending following response: %#v\n", response)