diff options
| author | tv <tv@krebsco.de> | 2026-11-07 22:35:22 +0100 |
|---|---|---|
| committer | tv <tv@krebsco.de> | 2026-11-07 22:35:22 +0100 |
| commit | 56a3dca1874fba17c3d174be451af9478b3bfb9d (patch) | |
| tree | 819e3a1d4902c6847b429dd69269ef475d067a45 /docs/openapi.yaml | |
| parent | 7323e8ed8598cda9784493aa3334d947120b53d8 (diff) | |
dashboard: a token handed over to another member's dashboard
Opening another member's dashboard passes a token reading only, for
five minutes, in the URL's fragment; its login page begins a session
with it. Tokens may be asked for with a shorter lifetime.
Auth plan M3 (hand-off).
Diffstat (limited to 'docs/openapi.yaml')
| -rw-r--r-- | docs/openapi.yaml | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/docs/openapi.yaml b/docs/openapi.yaml index 9b75618..d3715b1 100644 --- a/docs/openapi.yaml +++ b/docs/openapi.yaml @@ -1962,6 +1962,9 @@ components: limit: type: array items: { $ref: '#/components/schemas/CapabilityRequest' } + lifetime: + type: integer + description: Seconds the token lives, if less than `token-lifetime` (a token to hand over, say). TokenAnswer: type: object properties: |