The Atlassian Community Forums are currently in read-only mode. We will be relaunching on a new platform on September 22 (read more here). We apologize for the extended downtime. For concerns or questions, please email communitymanagers@atlassian.com. See you on the other side, on the new Atlassian Community Forums! :)

×

Forums

Articles
Create
cancel
Showing results for 
Search instead for 
Did you mean: 
  • Community
  • Q&A
  • Jira
  • Questions
  • How long does a PAT authenticated session last if you've disabled the invalidate sessions default?

How long does a PAT authenticated session last if you've disabled the invalidate sessions default?

Jamie Gaard
Contributor
May 11, 2023

We'd like to enforce our users and their Jira bots to make use of PATs, detailed here: https://confluence.atlassian.com/enterprise/using-personal-access-tokens-1026032365.html

Some of these users hit the API multiple times per min. Since PAT sessions are immediately terminated after successful authentication (by default) we end up with a bunch of authentication messages in our logs. Very annoying to parse. 

Luckily you can disable the default setting to invalidate PAT sessions, via a system flag. There's isnt any setting for how long should session last though. I would assume it defaults to Tomcat-Jira session length (and then the global Tomcat session length as a fallback to that), but this isn't mentioned anywhere. Does any one know? Thanks 

0 answers

Comments for this post are closed

Community moderators have prevented the ability to post new answers.