DeforaNetworks/corteza
3
0
Fork 0
Code Activity

Update description of AUTH_*_LIFETIME options

Browse Source
This commit is contained in:
Denis Arh
2022-05-19 14:28:12 +02:00
parent 157ef1e29f
commit 7f84994bfe
2 changed files with 27 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.env.example
+6 -4
View File
@@ -454,13 +454,15 @@
# AUTH_JWT_SECRET=<no value>
###############################################################################
# Access token lifetime
# Lifetime of the access token. Should be shorter than lifetime of the refresh token.
# Type: time.Duration
# Default: 2h
# AUTH_OAUTH2_ACCESS_TOKEN_LIFETIME=2h
###############################################################################
# Refresh token lifetime
# Lifetime of the refresh token. Should be much longer than lifetime of the access token.
#
# Refresh tokens are used to exchange expired access tokens with new ones.
# Type: time.Duration
# Default: 72h
# AUTH_OAUTH2_REFRESH_TOKEN_LIFETIME=72h
@@ -523,13 +525,13 @@
# AUTH_SESSION_COOKIE_SECURE=<no value>
###############################################################################
# How long do we keep the temporary session
# Duration of the in /auth lasts when user logs-in without using "remember-me" option.
# Type: time.Duration
# Default: 24h
# AUTH_SESSION_LIFETIME=24h
###############################################################################
# How long do we keep the permanent session
# Duration of the session in /auth lasts when user logs-in with "remember-me" option.
# Type: time.Duration
# Default: 8640h
# AUTH_SESSION_PERM_LIFETIME=8640h
app/options/auth.cue
+21 -10
View File
@@ -43,17 +43,23 @@ auth: schema.#optionsGroup & {
env: "AUTH_JWT_SECRET"
}
access_token_lifetime: {
type: "time.Duration"
description: "Access token lifetime"
env: "AUTH_OAUTH2_ACCESS_TOKEN_LIFETIME"
type: "time.Duration"
description: """
Lifetime of the access token. Should be shorter than lifetime of the refresh token.
"""
env: "AUTH_OAUTH2_ACCESS_TOKEN_LIFETIME"
defaultGoExpr: "time.Hour * 2"
defaultValue: "2h"
}
refresh_token_lifetime: {
type: "time.Duration"
description: "Refresh token lifetime"
env: "AUTH_OAUTH2_REFRESH_TOKEN_LIFETIME"
type: "time.Duration"
description: """
Lifetime of the refresh token. Should be much longer than lifetime of the access token.
Refresh tokens are used to exchange expired access tokens with new ones.
"""
env: "AUTH_OAUTH2_REFRESH_TOKEN_LIFETIME"
defaultGoExpr: "time.Hour * 24 * 3"
defaultValue: "72h"
@@ -113,14 +119,19 @@ auth: schema.#optionsGroup & {
description: "Defaults to true when HTTPS is used. Corteza will try to guess the this setting by"
}
session_lifetime: {
type: "time.Duration"
description: "How long do we keep the temporary session"
type: "time.Duration"
description: """
Duration of the in /auth lasts when user logs-in without using \"remember-me\" option.
"""
defaultGoExpr: "24 * time.Hour"
defaultValue: "24h"
}
session_perm_lifetime: {
type: "time.Duration"
description: "How long do we keep the permanent session"
type: "time.Duration"
description: """
Duration of the session in /auth lasts when user logs-in with \"remember-me\" option.
"""
defaultGoExpr: "360 * 24 * time.Hour"
defaultValue: "8640h"
}