Skip to main content

DEFAULT_LIFETIME

Constant DEFAULT_LIFETIME 

Source
pub const DEFAULT_LIFETIME: Duration;
Expand description

How long a nonce is good for by default.

Five minutes. Long enough that an ordinary REGISTER-then-refresh does not re-challenge, short enough that a captured Authorization is not a lasting credential. A longer window is not more convenient — a client that gets stale=true re-sends without prompting anyone.