Go to file
Jamie Lennox af6f1924eb Increase minimum token life required
MIN_TOKEN_LIFE_SECONDS is the number of seconds that the token provided
must be valid for to be used when making authentication requests. 1
second has always been a dumb number and was not based on any existing
value.

Because a user token may be reused by a service to make requests on
behalf of a user if the token is valid when sent it may not be valid for
the life of the request.

2 minutes is also an arbitrary value, but it should allow plenty of time
for service requests to complete before being rejected.

Closes-Bug: #1441910
Change-Id: I395a0770e72d1ec7904e656ca382a5270f793a8b
2015-04-09 10:48:30 +10:00
2012-06-11 13:33:02 -07:00
2013-09-24 12:34:17 +10:00
2014-05-07 12:12:43 -07:00
2015-02-13 17:55:34 +11:00
2012-09-29 16:03:23 -07:00
2011-10-25 16:50:08 -07:00
2013-05-17 14:43:31 -07:00
2014-05-22 07:12:03 +00:00
2015-02-13 17:55:34 +11:00
Description
RETIRED, further work has moved to Debian project infrastructure
1.8 MiB