diff options
| author | tv <tv@krebsco.de> | 2026-11-07 22:35:09 +0100 |
|---|---|---|
| committer | tv <tv@krebsco.de> | 2026-11-07 22:35:09 +0100 |
| commit | ec70060ae5fa665953741da921e28031b56bc5e0 (patch) | |
| tree | cd1f6f5ae90d3ad87b9667da20d6e85b62394ab1 /docs/example.toml | |
| parent | eed8f86912f53f549d9f9068f9bdf2c8e23aa0f7 (diff) | |
auth: logging in, and tokens as bearers
POST /auth/login (by htpasswd or the proxy), /auth/refresh,
/auth/logout, GET /auth/whoami; every request may bring
Authorization: Bearer instead of a password. --token-lifetime and
--session-lifetime.
Auth plan M2.
Diffstat (limited to 'docs/example.toml')
| -rw-r--r-- | docs/example.toml | 9 |
1 files changed, 9 insertions, 0 deletions
diff --git a/docs/example.toml b/docs/example.toml index b98752d..ab8237c 100644 --- a/docs/example.toml +++ b/docs/example.toml @@ -73,6 +73,15 @@ htpasswd = "/etc/continuum/htpasswd" # 0: never. # stream-heartbeat = "30s" +# How long a token this node issues (POST /auth/login, /auth/refresh) is taken, by every +# node of the swarm (docs/access.md, Tokens). Refreshed before it ends, it lasts until +# the login's end (session-lifetime). +# token-lifetime = "12h" + +# How long after a login (POST /auth/login) its tokens may be refreshed; then the user +# logs in again. +# session-lifetime = "7d" + # Where the reverse proxies whose user-header is believed connect from: IP addresses (or # ranges, as ADDRESS/BITS), and unix for the API's Unix sockets (bind-addr). On a host # with other users, leave out the addresses and have the proxy use a Unix socket: others |