)]}'
{"/COMMIT_MSG":[{"author":{"_account_id":8119,"name":"Eric Brown","email":"eric_wade_brown@yahoo.com","username":"ericwb"},"change_message_id":"37e4803767d073af8ffa6c3df16ad8120044070c","unresolved":false,"context_lines":[{"line_number":19,"context_line":"Problems with the current (short) token lifespan:"},{"line_number":20,"context_line":""},{"line_number":21,"context_line":"- (Use case) They break long-running processes when the token expires"},{"line_number":22,"context_line":"  before the process completes. Alternative solutions to addressing this"},{"line_number":23,"context_line":"  use case without increasing the expiration are complicated."},{"line_number":24,"context_line":""},{"line_number":25,"context_line":"- (Performance) Users have to re-authenticate more frequently."},{"line_number":26,"context_line":""}],"source_content_type":"text/x-gerrit-commit-message","patch_set":1,"id":"dada55a8_1b5b74f7","line":23,"range":{"start_line":22,"start_character":32,"end_line":23,"end_character":61},"updated":"2016-07-21 04:06:54.000000000","message":"Isn\u0027t one of the alternatives to use the x.509 client certificates (token-less auth)?  I haven\u0027t tried it myself, so not sure how complicated it is, but thought it allows services to authentication with certs and without tokens.","commit_id":"26243ed8d1610d4689696fcef7d2a5509568436d"},{"author":{"_account_id":13478,"name":"Boris Bobrov","email":"b.bobrov@sap.com","username":"bbobrov"},"change_message_id":"51ef000e5135c5e8e0938333430f89bab46dc9cd","unresolved":false,"context_lines":[{"line_number":19,"context_line":"Problems with the current (short) token lifespan:"},{"line_number":20,"context_line":""},{"line_number":21,"context_line":"- (Use case) They break long-running processes when the token expires"},{"line_number":22,"context_line":"  before the process completes. Alternative solutions to addressing this"},{"line_number":23,"context_line":"  use case without increasing the expiration are complicated."},{"line_number":24,"context_line":""},{"line_number":25,"context_line":"- (Performance) Users have to re-authenticate more frequently."},{"line_number":26,"context_line":""}],"source_content_type":"text/x-gerrit-commit-message","patch_set":1,"id":"bacf61ea_27817b90","line":23,"range":{"start_line":22,"start_character":32,"end_line":23,"end_character":61},"in_reply_to":"dada55a8_1b5b74f7","updated":"2016-08-03 11:58:36.000000000","message":"It does. But the problem is with tokens owned by users. A user obtains token, passes it to a service, a service passes it to another service that performs long-running operation and the token expires.","commit_id":"26243ed8d1610d4689696fcef7d2a5509568436d"}],"keystone/conf/token.py":[{"author":{"_account_id":17860,"name":"Samuel de Medeiros Queiroz","email":"samueldmq@gmail.com","username":"samueldmq"},"change_message_id":"020dcdc09e9a7cb54b6331f34185a4126d976230","unresolved":false,"context_lines":[{"line_number":45,"context_line":""},{"line_number":46,"context_line":"expiration \u003d cfg.IntOpt("},{"line_number":47,"context_line":"    \u0027expiration\u0027,"},{"line_number":48,"context_line":"    default\u003d7 * 24 * 60 * 60,"},{"line_number":49,"context_line":"    help\u003dutils.fmt(\"\"\""},{"line_number":50,"context_line":"The amount of time that a token should remain valid (in seconds). Drastically"},{"line_number":51,"context_line":"reducing this value may break \"long-running\" operations that involve multiple"}],"source_content_type":"text/x-python","patch_set":1,"id":"9a89bdaa_db402637","line":48,"range":{"start_line":48,"start_character":12,"end_line":48,"end_character":28},"updated":"2016-09-07 02:59:26.000000000","message":"increase from 1 hour to a week seems to much\n\nalso, a wouldn\u0027t expect a long running operation to run for more than 1 day ?","commit_id":"26243ed8d1610d4689696fcef7d2a5509568436d"}]}