CODEWITHSUNDEEP
javahashicorp-vault
myratas
myratas

Reputation: 51

Is there a way to know expire vault client tokens?

I'm using https://www.vaultproject.io/docs/auth/approle.html to generate vault client tokens,but I want to know tokens expire state. Is that possible ?

Upvotes: 2

Views: 7621

Answers (2)

iomv
iomv

Reputation: 2707

This is pretty straight forward if you have the token itself, as there are multiple ways to check validity:

vault token lookup

or with a cURL request + jq:

curl -H "X-Vault-Request: true" -H "X-Vault-Token: $(vault print token)" https://{{ your-vault-server-here }}/v1/auth/token/lookup-self | jq -re .data.ttl

The first command will fail with a 403 error (and return a non-zero code) if the token is expired, or print out a nicely formatted overview of the token's details (and return zero) if the token is still valid.

The second command does exactly the same with the difference that it prints out the ttl in seconds if the token is valid.

Upvotes: 8

Andrian Soluk
Andrian Soluk

Reputation: 474

You can get lease_duration and compare it with the current date time. If current date time is after lease_duration, token should be expired. Can you please try?

Upvotes: 0

Related Questions