Repository navigation
A deleted HTTP token keeps working on a remote instance for up to 5 minutes #777
Description
Description
After an HTTP bearer token is deleted (or expires), a caller already using it can keep calling the remote instance's protected HTTP endpoints for up to 5 minutes. Accepted tokens are trusted for that long before being checked with the platform again. Shortening that window to 60 seconds, as decided on the parent issue.
Epic/Story
Metadata
Metadata
Assignees
Type
Projects
- Status
Activity