diff --git a/flask_multipass/providers/authlib.py b/flask_multipass/providers/authlib.py
index 2fd2d8d..1c7c167 100644
--- a/flask_multipass/providers/authlib.py
+++ b/flask_multipass/providers/authlib.py
@@ -10,11 +10,11 @@
 from authlib.common.errors import AuthlibBaseError
 from authlib.integrations.flask_client import FlaskIntegration, OAuth
 from flask import current_app, redirect, request, url_for
-from requests.exceptions import HTTPError, RequestException
+from requests.exceptions import HTTPError, RequestException, Timeout
 
 from flask_multipass.auth import AuthProvider
 from flask_multipass.data import AuthInfo, IdentityInfo
-from flask_multipass.exceptions import AuthenticationFailed, IdentityRetrievalFailed
+from flask_multipass.exceptions import AuthenticationFailed, IdentityRetrievalFailed, MultipassException
 from flask_multipass.identity import IdentityProvider
 from flask_multipass.util import login_view
 
@@ -70,6 +70,8 @@ class AuthlibAuthProvider(AuthProvider):
                          of ``register()`` in the
                          `authlib docs <https://docs.authlib.org/en/latest/client/frameworks.html>`_
                          for details.
+    - ``request_timeout``: the timeout for fetching the oauth token or making a userinfo
+                           request (None by default)
     """
 
     def __init__(self, *args, **kwargs):
@@ -77,6 +79,7 @@ def __init__(self, *args, **kwargs):
         callback_uri = self.settings.get('callback_uri', f'/multipass/authlib/{self.name}')
         self.authlib_client = _authlib_oauth.register(self.name, **self.authlib_settings)
         self.include_token = self.settings.get('include_token', False)
+        self.request_timeout = self.settings.get('request_timeout')
         self.use_id_token = self.settings.get('use_id_token')
         if self.use_id_token is None:
             # default to using the id token when using the openid scope (oidc)
@@ -120,7 +123,10 @@ def _authorize_callback(self):
             raise AuthenticationFailed(error, provider=self)
         try:
             try:
-                token_data = self.authlib_client.authorize_access_token()
+                token_data = self.authlib_client.authorize_access_token(timeout=self.request_timeout)
+            except Timeout as exc:
+                logging.getLogger('multipass.authlib').error('Getting token timed out')
+                raise MultipassException('Token request timed out, please try again later') from exc
             except HTTPError as exc:
                 try:
                     data = exc.response.json()