htcondor / scitokens-credmon

HTCondor implementation of the Scitokens credential monitor
Apache License 2.0
3 stars 7 forks source link

Delete tokens if not used with some delay #36

Closed jasoncpatton closed 5 years ago

jasoncpatton commented 5 years ago

This will require some changes on the credd side, mainly that instead of writing a mark file for a user's entire cred dir, mark files should be written for specific unused credentials.

When this is the case, the OAuthCredmon will now look at the mtime of a mark file, and if it's older than N (at this moment, N = 24 hours), the credmon will remove all tokens associated with the same name as the mark file.

I want to make the delay time configurable before merging this.