give cert-auth role tokens a 15m ttl so logins stop leaving 32-day leases
This commit is contained in:
parent
9b0c0ad7be
commit
00df3ccffb
1 changed files with 160 additions and 30 deletions
|
|
@ -84,5 +84,6 @@ It has no opinion on **what** a caller may read. That is the policy attached to
|
|||
the cert role, and it lives in the store.
|
||||
|
||||
It holds the token minted at login and renews nothing. A handle is built per
|
||||
credential, so the login is the cheap part of a rare operation — a caller that
|
||||
wanted to keep one alive across a token's lifetime would need more than this.
|
||||
credential, so the login is the cheap part of a rare operation. Cert-auth roles
|
||||
mint tokens for [`client::CERT_ROLE_TOKEN_TTL`]; a caller that wanted to keep one
|
||||
alive longer would need more than this.
|
||||
|
|
|
|||
Loading…
Reference in a new issue