Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Token creation should allow 'no expiration' #1618

Closed
juan-vg opened this issue Dec 10, 2024 · 4 comments · Fixed by #1665
Closed

Token creation should allow 'no expiration' #1618

juan-vg opened this issue Dec 10, 2024 · 4 comments · Fixed by #1665
Assignees
Labels
enhancement New feature or request
Milestone

Comments

@juan-vg
Copy link
Contributor

juan-vg commented Dec 10, 2024

Feature description 💡

Currently both team tokens and user tokens don't allow to create tokens without expiration date. Even if the time values are set to 0, the expiration date is set.

I believe the value 0 should mean no expiration, and this should imply the tokens will never expire. On top, the info tooltips should provide info about this.

Anything else?

While team tokens have a default time-values set to 0, the user tokens creation dialog doesn't set 0 as default (blank value).

@juan-vg juan-vg added the enhancement New feature or request label Dec 10, 2024
@alfespa17
Copy link
Member

I am no a security expert but I think could create some issues. why would you need a token with no expiration?

@juan-vg
Copy link
Contributor Author

juan-vg commented Dec 11, 2024

I am no a security expert but I think could create some issues. why would you need a token with no expiration?

Automations (like GitHub Actions). I'm currently working on the PR preview plans feature via GitHub Actions (but any other API feature could fit also this case), and a TK API token is needed. I believe for these kind of use cases, the 'no expiration' feature is worth it. At the end, it's on the people using those tokens to keep them safe and to rotate them when they consider.

On top, TFC allows you to create tokens without expiration, so I believe it makes sense also in TK.

@alfespa17 alfespa17 added this to the 2.25.0 milestone Dec 11, 2024
@alfespa17
Copy link
Member

I will try to add this in the following weeks

@alfespa17
Copy link
Member

Next version will allow to set "0" when creating the PAT or team tokens when you specify days, hours or minutes

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants