zuul/etc
Matthieu Huin b599c7249d authentication config: add optional max_validity_time, skew
The Zuul admin can configure authenticators with an optional
"max_validity_time" field, which is the maximum age in seconds
for a valid authentication token. By default there is no
maximum age set for tokens, except the one deduced from
the token's "exp" claim.
If "max_validity" is set, tokens without an "iat" claim will
be rejected.

This is meant as an extra security to avoid accidentally issueing
very long lived tokens through the CLI.

The "skew" field can be used to mitigate clocks discrepancies
between Zuul and a JWT emitter.

Change-Id: I9351ca016b60050b5f3b3950b840d5f719e919ce
2019-12-10 16:39:29 +01:00
..
zuul-executor.service.d Add zuul systemd drop-in files for CentOS 7 2018-04-29 23:29:39 +02:00
zuul-scheduler.service.d Add zuul systemd drop-in files for CentOS 7 2018-04-29 23:29:39 +02:00
zuul-web.service.d Add zuul systemd drop-in files for CentOS 7 2018-04-29 23:29:39 +02:00
layout.yaml-sample Fix indent error for layout.yaml-sample. 2018-06-20 12:20:23 +08:00
logging.conf-sample Add propagate=0 for loggers in logging.conf-sample 2019-11-14 01:08:50 +03:00
zuul-executor.service Fix zuul systemd files 2018-04-27 18:27:24 -04:00
zuul-scheduler.service Fix zuul systemd files 2018-04-27 18:27:24 -04:00
zuul-web.service Fix zuul systemd files 2018-04-27 18:27:24 -04:00
zuul.conf-sample authentication config: add optional max_validity_time, skew 2019-12-10 16:39:29 +01:00