)]}'
{"/COMMIT_MSG":[{"author":{"_account_id":8482,"name":"Colleen Murphy","email":"colleen@gazlene.net","username":"krinkle"},"change_message_id":"2626cfde1cb9740d680befe3aad3a5033d144e09","unresolved":false,"context_lines":[{"line_number":7,"context_line":"Mention allow_expired_window in fernet FAQ"},{"line_number":8,"context_line":""},{"line_number":9,"context_line":"this value should be the basis of calculating desired number of fernet"},{"line_number":10,"context_line":"keys when retrieving of expired keys is needed, for example to"},{"line_number":11,"context_line":"make ServiceToken auth to work."},{"line_number":12,"context_line":""},{"line_number":13,"context_line":"Change-Id: Id679cfc20603eacf7b8171a25a650e8c745033db"}],"source_content_type":"text/x-gerrit-commit-message","patch_set":1,"id":"9fdfeff1_e6336c61","line":10,"range":{"start_line":10,"start_character":32,"end_line":10,"end_character":36},"updated":"2019-02-22 12:43:56.000000000","message":"*expired tokens","commit_id":"8790bffa5521be8f6239dadc9d870dd1a243ee9f"},{"author":{"_account_id":9542,"name":"Pavlo Shchelokovskyy","email":"pshchelokovskyy@mirantis.com","username":"pshchelo"},"change_message_id":"3ac04ba269cef5a937c54266f8271588294c54ea","unresolved":false,"context_lines":[{"line_number":7,"context_line":"Mention allow_expired_window in fernet FAQ"},{"line_number":8,"context_line":""},{"line_number":9,"context_line":"this value should be the basis of calculating desired number of fernet"},{"line_number":10,"context_line":"keys when retrieving of expired keys is needed, for example to"},{"line_number":11,"context_line":"make ServiceToken auth to work."},{"line_number":12,"context_line":""},{"line_number":13,"context_line":"Change-Id: Id679cfc20603eacf7b8171a25a650e8c745033db"}],"source_content_type":"text/x-gerrit-commit-message","patch_set":1,"id":"9fdfeff1_3b3ceb90","line":10,"range":{"start_line":10,"start_character":32,"end_line":10,"end_character":36},"in_reply_to":"9fdfeff1_e6336c61","updated":"2019-02-26 13:38:55.000000000","message":"Done","commit_id":"8790bffa5521be8f6239dadc9d870dd1a243ee9f"}],"doc/source/admin/fernet-token-faq.rst":[{"author":{"_account_id":8482,"name":"Colleen Murphy","email":"colleen@gazlene.net","username":"krinkle"},"change_message_id":"2626cfde1cb9740d680befe3aad3a5033d144e09","unresolved":false,"context_lines":[{"line_number":365,"context_line":"from the repository without negative validation side-effects."},{"line_number":366,"context_line":""},{"line_number":367,"context_line":".. note::"},{"line_number":368,"context_line":"   If retrieving expired tokens is needed (for example when services are"},{"line_number":369,"context_line":"   configured to use ServiceToken auth), the value of"},{"line_number":370,"context_line":"   ``allow_expired_window`` option from the ``[token]`` config section"},{"line_number":371,"context_line":"   should be taken as a token_expiration in the formula above."}],"source_content_type":"text/x-rst","patch_set":1,"id":"9fdfeff1_2613b4ba","line":368,"range":{"start_line":368,"start_character":6,"end_line":368,"end_character":16},"updated":"2019-02-22 12:43:56.000000000","message":"Since fernet tokens are stateless I think \"retrieving\" is not the right word, I would use \"validating\"","commit_id":"8790bffa5521be8f6239dadc9d870dd1a243ee9f"},{"author":{"_account_id":9542,"name":"Pavlo Shchelokovskyy","email":"pshchelokovskyy@mirantis.com","username":"pshchelo"},"change_message_id":"3ac04ba269cef5a937c54266f8271588294c54ea","unresolved":false,"context_lines":[{"line_number":365,"context_line":"from the repository without negative validation side-effects."},{"line_number":366,"context_line":""},{"line_number":367,"context_line":".. note::"},{"line_number":368,"context_line":"   If retrieving expired tokens is needed (for example when services are"},{"line_number":369,"context_line":"   configured to use ServiceToken auth), the value of"},{"line_number":370,"context_line":"   ``allow_expired_window`` option from the ``[token]`` config section"},{"line_number":371,"context_line":"   should be taken as a token_expiration in the formula above."}],"source_content_type":"text/x-rst","patch_set":1,"id":"9fdfeff1_5b41af09","line":368,"range":{"start_line":368,"start_character":6,"end_line":368,"end_character":16},"in_reply_to":"9fdfeff1_2613b4ba","updated":"2019-02-26 13:38:55.000000000","message":"Done","commit_id":"8790bffa5521be8f6239dadc9d870dd1a243ee9f"},{"author":{"_account_id":8482,"name":"Colleen Murphy","email":"colleen@gazlene.net","username":"krinkle"},"change_message_id":"2626cfde1cb9740d680befe3aad3a5033d144e09","unresolved":false,"context_lines":[{"line_number":368,"context_line":"   If retrieving expired tokens is needed (for example when services are"},{"line_number":369,"context_line":"   configured to use ServiceToken auth), the value of"},{"line_number":370,"context_line":"   ``allow_expired_window`` option from the ``[token]`` config section"},{"line_number":371,"context_line":"   should be taken as a token_expiration in the formula above."}],"source_content_type":"text/x-rst","patch_set":1,"id":"9fdfeff1_c6fd083c","line":371,"updated":"2019-02-22 12:43:56.000000000","message":"This isn\u0027t quite clear to me. allow_expired_window is additive, so if we want keys to be around long enough to validate a token that has expired, then token_expiration in the formula needs to be ``[token]/expiration`` + ``[token]/allow_expired_window``. In that case it\u0027s unclear to use \"token_expiration\" in the formula, maybe we should use \"maximum_validation_window\", and move this note up in the page so it is closer to where the formula is defined.","commit_id":"8790bffa5521be8f6239dadc9d870dd1a243ee9f"},{"author":{"_account_id":9542,"name":"Pavlo Shchelokovskyy","email":"pshchelokovskyy@mirantis.com","username":"pshchelo"},"change_message_id":"3ac04ba269cef5a937c54266f8271588294c54ea","unresolved":false,"context_lines":[{"line_number":368,"context_line":"   If retrieving expired tokens is needed (for example when services are"},{"line_number":369,"context_line":"   configured to use ServiceToken auth), the value of"},{"line_number":370,"context_line":"   ``allow_expired_window`` option from the ``[token]`` config section"},{"line_number":371,"context_line":"   should be taken as a token_expiration in the formula above."}],"source_content_type":"text/x-rst","patch_set":1,"id":"9fdfeff1_1b47a71f","line":371,"in_reply_to":"9fdfeff1_c6fd083c","updated":"2019-02-26 13:38:55.000000000","message":"moved up and just repeated a changed formula","commit_id":"8790bffa5521be8f6239dadc9d870dd1a243ee9f"}]}