diff --git a/server/server_test.go b/server/server_test.go
index 32f16becda7260b61a7e2a5cc8c94422933434ec..24f76199c8aa686e6567356181ac8beab667fe73 100644
--- a/server/server_test.go
+++ b/server/server_test.go
@@ -317,7 +317,8 @@ func makeOAuth2Tests(clientID string, clientSecret string, now func() time.Time)
 						return t1.Sub(t2) < within
 					}
 
-					if !timeEq(token.Expiry, expectedExpiry, time.Second) {
+					// TODO: This is a flaky test. We need something better (eg. clockwork).
+					if !timeEq(token.Expiry, expectedExpiry, 2*time.Second) {
 						return fmt.Errorf("expected expired_in to be %s, got %s", expectedExpiry, token.Expiry)
 					}