diff options
Diffstat (limited to 'docs/access.md')
| -rw-r--r-- | docs/access.md | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/docs/access.md b/docs/access.md index 6422b51..3d4aeaf 100644 --- a/docs/access.md +++ b/docs/access.md @@ -133,7 +133,8 @@ curl -H "Authorization: Bearer ct1.…" http://other-node:3000/store session's tokens itself, until it restarts; others take them until they expire. A stream opened with a token (server-sent events, the store's streams) ends with it: when it expires, or once the node holds a change that revokes it (looked at as - protocol data changes), a session's end on the node itself included. A token of a node banned or forgotten by the swarm isn't + protocol data changes), a session's end on the node itself included. One opened by + password or a proxy's header ends once its user is disabled or removed. A token of a node banned or forgotten by the swarm isn't taken either. In a swarm without a registry, a token is taken until it expires. The user a logout names is its node's word, and a logout no deciding path, even under a strict policy: any member could log any user out. It ends sessions; and a value there |