Skip to content

Project access tokens are subject to forced expiration limits

What does this MR do and why?

Add wording to reflect that Project Access Tokens are also subject to the maximum allowable lifetime setting available in self managed Ultimate installations for personal access tokens.

Screenshots or screen recordings

image

How to set up and validate locally

  1. In a self-managed installation, as administrator, create a Maximum allowable lifetime for personal access token and check enforce personal access token expiration under Settings->General.
  2. In a project, attempt to create a project access token
  3. The message that a limit is in place with an enforced expiration date will appear

MR acceptance checklist

This checklist encourages us to confirm any changes have been analyzed to reduce risks in quality, performance, reliability, security, and maintainability.

typemaintenance

Edited by Steve Grossman

Merge request reports

Loading