Skip to content

Commit

Permalink
chore: add oathkeeper authn oauth2 introspection max_cost configuration
Browse files Browse the repository at this point in the history
  • Loading branch information
David-Wobrock committed Aug 9, 2024
1 parent f22a26e commit 6f974a9
Showing 1 changed file with 2 additions and 1 deletion.
3 changes: 2 additions & 1 deletion docs/oathkeeper/pipeline/authn.md
Original file line number Diff line number Diff line change
Expand Up @@ -478,7 +478,7 @@ This authenticator will use the username from the HTTP Basic Authorization heade
false.
- `ttl` (string) - Can override the default behavior of using the token exp time, and specify a set time to live for the token
in the cache. If the token exp time is lower than the set value the token exp time will be used instead.
- `max_tokens` (int) - Max number of tokens to cache.
- `max_tokens` (int) - Max number of tokens to cache. Defaults to 1000.
- `required_scope` ([]string, optional) - Sets what scope is required by the URL and when making performing OAuth 2.0 Client
Credentials request, the scope will be included in the request:

Expand Down Expand Up @@ -606,6 +606,7 @@ Token Introspection to check if the token is valid and if the token was granted
false.
- `ttl` (string) - Can override the default behavior of using the token exp time, and specify a set time to live for the token
in the cache.
- `max_cost` (int) - Max cost to cache. Defaults to 100000000.

Please note that caching won't be used if the scope strategy is `none` and `required_scope` isn't empty. In that case, the
configured introspection URL will always be called and is expected to check if the scope is valid or not.
Expand Down

0 comments on commit 6f974a9

Please sign in to comment.