From 56a3dca1874fba17c3d174be451af9478b3bfb9d Mon Sep 17 00:00:00 2001
From: tv <tv@krebsco.de>
Date: Sat, 7 Nov 2026 22:35:22 +0100
Subject: dashboard: a token handed over to another member's dashboard

Opening another member's dashboard passes a token reading only, for
five minutes, in the URL's fragment; its login page begins a session
with it. Tokens may be asked for with a shorter lifetime.

Auth plan M3 (hand-off).
---
 docs/openapi.yaml | 3 +++
 1 file changed, 3 insertions(+)

(limited to 'docs/openapi.yaml')

diff --git a/docs/openapi.yaml b/docs/openapi.yaml
index 9b75618..d3715b1 100644
--- a/docs/openapi.yaml
+++ b/docs/openapi.yaml
@@ -1962,6 +1962,9 @@ components:
         limit:
           type: array
           items: { $ref: '#/components/schemas/CapabilityRequest' }
+        lifetime:
+          type: integer
+          description: Seconds the token lives, if less than `token-lifetime` (a token to hand over, say).
     TokenAnswer:
       type: object
       properties:
-- 
cgit v1.3.1