The scope by default is empty, meaning the token can access all resources. The lifetime also defaults to 20 minutes. These are sensible values for high-trust or high-confidence deployments but the developer should be allowed to customize them from the public interface.
Add a mechanism to enable specifying the default token scope and token lifetime.
The scope by default is empty, meaning the token can access all resources. The lifetime also defaults to 20 minutes. These are sensible values for high-trust or high-confidence deployments but the developer should be allowed to customize them from the public interface.
Add a mechanism to enable specifying the default token scope and token lifetime.