Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add A TTL configuration when creating an API token #21324

Open
fpetersen-gl opened this issue Jan 10, 2025 · 2 comments
Open

Add A TTL configuration when creating an API token #21324

fpetersen-gl opened this issue Jan 10, 2025 · 2 comments
Labels

Comments

@fpetersen-gl
Copy link
Contributor

  • Have it active by default (user must actively choose to make an API token that persists permanently).
    • A maintenance process will need to clear these down regularly.
    • This would go in the same location, screenshot in Provide new “Token Usage” page (for admins) #21321.
    • Default TTL 30 days.
    • In addition - Othello suggests we add Recommendation (UI copy and/or docs) advising users to create dedicated System Users for long-term access tokens
  • System users will be stored as local users
  • Recommend to apply least-privilege permissions to these system users, just enough for the use-case
  • Recommend to review these long-term tokens on a regular basis (using the new “Token Usage” page)
    This config can go here:
    Image
@manojks1999
Copy link

Hi @fpetersen-gl ,
Can I work on this ?

@fpetersen-gl
Copy link
Contributor Author

Hi @manojks1999!
Thanks for getting in touch and also volunteering!
As we'd internally like to use this set of issues to bring in some refactoring, I'm afraid I need to decline.
This doesn't mean however that we don't want any help - feel free to grab a ticket or file a PR from the list of issues (I took the liberty to filter for "good first issues" 🙂 )

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

2 participants