New check: Access Token Lifespan is too long

iteratec / kcwarden

Keycloak Configuration Auditor

https://iteratec.github.io/kcwarden/

Apache License 2.0

11 stars 0 forks source link

Open twwd opened 1 month ago

twwd commented 1 month ago

Check that the lifespan for access tokens is not too high on realm and client levels. To discuss: What is a sensible threshold?