Sign in
instance

Move the instance credential lifetime controls.

Changed on

The two controls are separate on purpose: raising max_finite_lifetime_seconds can never manufacture an indefinite credential. A TIGHTENING enumerates every affected live credential and refuses with 409 until the caller re-sends with confirm: true, so a settings change never silently kills a live credential.

put/api/v1/instance/credential-policy

Request

  • Base URL: / (relative, and the document was published on a file host, not at the API’s origin)
  • URL: /api/v1/instance/credential-policy
  • Auth: HTTP bearer

Request body

max_finite_lifetime_secondsinteger required
allow_indefiniteboolean required
max_live_credentialsinteger required
confirmboolean

Acknowledges the enumerated affected credentials. A tightening refuses with 409 until this is true, so a settings change never silently kills a live credential.

Response

The policy as written, with what the clamp touched.

appliedboolean required

False when the request was a PREVIEW: a tightening whose affected credentials the caller has not acknowledged with confirm. Nothing was written, and affected is the enumeration the caller must see before asking again. A settings change never silently kills a live credential.

clamped_countinteger required

Changes

  • f24ca8785e72Revision changes
    • warning

      the request property's max was set to 315360000.00

  • 54b2780eec85Revision changes
    • info

      added the optional property / to the response with the status

    • info

      added the optional property / to the response with the status

    • info

      added the optional property / to the response with the status

    • info

      added the optional property / to the response with the status

    • info

      added the optional property / to the response with the status

    • info

      added the optional property / to the response with the status

    • info

      added the optional property / to the response with the status