Watch
0
0
Fork
You've already forked hyperhive
0

give cert-auth role tokens a 15m ttl so logins stop leaving 32-day leases

This commit is contained in:
atlas 2026-10-28 18:32:44 +01:00 • committed by mara
commit 00df3ccffb

View file

@ -84,5 +84,6 @@ It has no opinion on **what** a caller may read. That is the policy attached to
the cert role, and it lives in the store.
It holds the token minted at login and renews nothing. A handle is built per
credential, so the login is the cheap part of a rare operation — a caller that
wanted to keep one alive across a token's lifetime would need more than this.
credential, so the login is the cheap part of a rare operation. Cert-auth roles
mint tokens for [`client::CERT_ROLE_TOKEN_TTL`]; a caller that wanted to keep one
alive longer would need more than this.