Introduction
With the implementation of Keycloak for managing the new authentication system, token management has evolved. Keycloak enforces a limited lifespan for tokens, as an important security measure.
A token has a maximum validity of one year. After this period, it expires and must be regenerated to ensure uninterrupted access to all features.
To assist you, we have implemented an alert system that notifies you when your tokens are approaching their expiration date. This allows you to regenerate them in time and avoid any service interruptions.
Email Alerts
The system will send emails to notify of upcoming token expiration :
- Personal Access Tokens (PAT) : emails are sent directly to each user.
- Integration Tokens : emails are sent to the administrators of the client space.
For both types of tokens (PAT and integration), three emails are sent as long as the token has not been regenerated :
- 2 weeks before the expiration date
- 1 week before the expiration date
- 1 day before the expiration date
Each email contains a button that allows you to go directly to the token regeneration screen.
In Platform Notification Alerts
The system will also send notifications to alert you of upcoming token expiration :
- Personal Access Tokens (PAT) : notifications are sent directly to each affected user.
- Integration Tokens : notifications are sent to the administrators of the client space.
These notifications appear in the notification center. Make sure it is not in silent mode so you don’t miss any alerts.
For both types of tokens (PAT and integration), four notifications are sent as long as the token has not been regenerated :
- 2 weeks before the expiration date
- 1 week before the expiration date
- 1 day before the expiration date
- After expiration
Each notification contains a button that allows you to go directly to the token regeneration screen.