Recommendations for Token Lifetimes (AARC G081)
Open access0 citations
Abstract
This document provides a short overview over selected types of tokens used to identify and authorise users. We analyse the different properties of tokens and categorise available authorisation patterns to give recommendations about the lifetimes of tokens associated with specific properties and authorisation levels.
// Source
Authors: Marcus Hardt, Valeria Ardizzone, Dave Dykstra, Christos Kanellopoulos, Tomasz Kuczyński, Nicolas Liampotis, Maarten Litmaath, Mischa Sallé, Hannah Short, Jan Pavlíček, Gabriel Zachmann