Pregunta

I am using Django Rest Framework token-authentication mechanism.

http://www.django-rest-framework.org/api-guide/authentication#tokenauthentication

It creates database table with field created with the value equal to the timestamp, when te token was created. E.g: 2014-04-07 07:42:50.395626

Anyone knows how long is this token valid? I can not find this info on mentioned website.

I am also wondering, that this token is still valid, even when the user changes password. Shouldn't it generate a new one, or at least make the old on no more valid?

¿Fue útil?

Solución

Answer to this question can be found HERE:

SHORTLY: this token is valid infinitely long.

If you would like to have token, which expires after certain time, please refere to examples shown in mentioned question.

Licenciado bajo: CC-BY-SA con atribución
No afiliado a StackOverflow
scroll top