feat: Session token short lived web admin (M2-11000) - #2102

Open

sricharan-varanasi wants to merge 6 commits into

session-token-client-typefrom

session-token-short-lived-web-admin

Commits on Jul 21, 2026

feat: per-client token expiration settings and resolver
sricharan-varanasi
committed
5a122d6
feat: short-lived access & refresh tokens for web/admin clients
sricharan-varanasi
committed
8f6cc52
fix: keep refresh-token revocation exp correct under per-client lifetimes
sricharan-varanasi
committed
b061d7d
docs: document per-client token lifetime env vars
sricharan-varanasi
committed
453c487
fix: skip lifetime resolution when exp is already provided
sricharan-varanasi
committed
4506bf7
feat: set web/admin token lifetimes to 15m access / 30m refresh
sricharan-varanasi
committed
8b42a12