Which kind of token can be renewed indefinitely?
Which kind of token can be renewed indefinitely?
A periodic token can be renewed indefinitely. At each renewal, its TTL (time-to-live) is reset to the configured period, meaning it will never expire as long as it continues to be renewed within each period. This characteristic makes it distinct from other tokens, which may have expiration limits or different conditions of use and renewal.
A Periodic token (only token which can be renew indefinitely) Orphan token: Orphan tokens still expire when their own max TTL is reached. Use-limite token: Only indicates the number of times it can be used, but expires when it is due. Root Token: they are the only type of token within Vault that can be set to never expire without any renewal needed E: no sense
Described here " At issue time, the TTL of a periodic token will be equal to the configured period. At every renewal time, the TTL will be reset back to this configured period, and as long as the token is successfully renewed within each of these periods of time, it will never expire. Outside of root tokens, it is currently the only way for a token in Vault to have an unlimited lifetime."