Orchestration always requests token with no duration

arrowhead-f / core-java

Arrowhead Core Framework Implementation in Java

Apache License 2.0

4 stars 12 forks source link

Open eudyptula opened 5 years ago

eudyptula commented 5 years ago

Orchestration always requests token with no duration - and tokens cannot be revoked (OrchestratorDriver.java:541).

Also, who should decide the duration; the consumer, the provider, or the cloud operator?

hegeduscs commented 5 years ago

Good question, we didn't make a decision on that on purpose.

The idea was that the authorization should contain some sort of guideline on that: how long a given admission should be provided.

Need to work on this!