..
    Warning: Do not edit this file. It is automatically generated from the
    software project's code and your changes will be overwritten.

    The tool to generate this file lives in openstack-doc-tools repository.

    Please make any changes needed in the code, then run the
    autogenerate-config-doc tool from the openstack-doc-tools repository, or
    ask for help on the documentation mailing list, IRC channel or meeting.

.. _keystone-revoke:

.. list-table:: Description of revoke configuration options
   :header-rows: 1
   :class: config-ref-table

   * - Configuration option = Default value
     - Description
   * - **[revoke]**
     -
   * - ``cache_time`` = ``3600``
     - (Integer) Time to cache the revocation list and the revocation events (in seconds). This has no effect unless global and token caching are enabled.
   * - ``caching`` = ``True``
     - (Boolean) Toggle for revocation event caching. This has no effect unless global caching is enabled.
   * - ``driver`` = ``sql``
     - (String) Entrypoint for an implementation of the backend for persisting revocation events in the keystone.revoke namespace. Supplied drivers are kvs and sql.
   * - ``expiration_buffer`` = ``1800``
     - (Integer) This value (calculated in seconds) is added to token expiration before a revocation event may be removed from the backend.