CyberCoveLLC/threshold
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat: make auth token staleness and duration configurable (#777)

Browse Source 
* feat: make auth token time to live and staleness configurable

* docs: add configuration docs for auth token TTL and staleness

Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>
This commit is contained in:
Jeff MalnickandJeff Mitchell authored and GitHub committed 2020-11-16 10:39:18 -08:00
1 parent a7fca44809
commit 11c7c8dbe8
7 files changed
+190 -63
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

website/content/docs/configuration/controller.mdx
+7
View File
@@ -40,6 +40,13 @@ used by workers after initial connection to controllers via the worker's
bind a publicly accessible IP to a NIC on the host directly, such as an Amazon
EIP.
- `auth_token_time_to_live` - Maximum time to live (TTL) for all auth tokens globally (pertains
to all tokens from all auth methods). Valid time units are anything specified by Golang's
[ParseDuration()](https://golang.org/pkg/time/#ParseDuration) method. Default is 7 days.
- `auth_token_time_to_stale` - Maximum time of inactivity for all auth tokens globally (pertains
to all tokens from all auth methods). Valid time units are anything specified by Golang's
[ParseDuration()](https://golang.org/pkg/time/#ParseDuration) method. Default is 1 day.
## KMS Configuration
The controller requires two KMS stanzas for `root` and `worker-auth` purposes: