[CWD-3028] As an application, I want to create short-lived tokens

Type: Suggestion
Resolution: Fixed
Fix Version/s: 2.6
Component/s: REST, SSO
Labels:
- Lasso

Feedback Policy:

Our product teams collect and evaluate feedback from a number of different sources. To learn more about how we use customer feedback in the planning process, check out our new feature policy.

As an application, I want to create a token for user that is valid for a short period of time. For instance, to temporarily grant the user access to a restricted part of the application.

blocks

CWD-3000 Support for WebSudo

Closed

incorporates

CWD-3057 Add an operation in the REST client to invalidate all tokens of a given user

Closed

is duplicated by

CWD-2931 Dynamically specify the expiry period for session cookies on login

Closed

relates to

CWD-340 Ability to configure session timeouts for individual applications

Closed

Testing discovered

CWD-3083 TokenReaper task does not delete expired tokens in the background

Closed

was split into

CWD-3042 Drop column cwd_token.last_accessed_date, which is no longer in use

Closed

mentioned in: Page Loading...; Wiki Page Loading...

(1 was split into, 2 mentioned in)

joe added a comment - 22/Oct/2015 2:04 AM

As part of this change, the session resource now accepts a duration parameter to specify how long a token should live, in seconds.

joe added a comment - 22/Oct/2015 2:04 AM As part of this change, the session resource now accepts a duration parameter to specify how long a token should live, in seconds.

Assignee:: Diego Berrueta

Reporter:: Diego Berrueta

Votes:: 0 Vote for this issue

Watchers:: 2 Start watching this issue

Created:: 17/Dec/2012 5:18 AM

Updated:: 19/Sep/2019 5:50 AM

Resolved:: 16/Jan/2013 10:39 PM

Details

Description

Attachments

Issue Links

Forms

Activity

Collapse comment: joe added a comment - 22/Oct/2015 2:04 AM

Expand comment: joe added a comment - 22/Oct/2015 2:04 AM

People

Dates