Title
#kolide
defensivedepth

defensivedepth

08/26/2020, 6:59 PM
Does a Fleet user API token ever get rotated by Fleet itself?
zwass

zwass

08/26/2020, 7:00 PM
IIRC the token will expire if unused for some time.
7:01 PM
Looking at that doc it seems it doesn't matter whether it is active or not.
defensivedepth

defensivedepth

08/26/2020, 7:04 PM
We are trying to find a way to programmatically add a Fleet user - Was going to try and use the first user's API token. So the default value of
session_duration
means that the API token will be regenerated every 90 days, correct?
zwass

zwass

08/26/2020, 7:06 PM
Yes, and I believe in order for it to be regenerated they will need to re-authenticate.
defensivedepth

defensivedepth

08/26/2020, 8:45 PM
Thanks Zach!