ReadMeFeed / Community knowledge

#token-expiry

Real questions. Useful conversations. Find the people who know your stack.

Editorial question64.1K views1,101 votes1 answer2,807 following

AI-generated

401 Unauthorized from GitLab API after personal access token expiry: distinguishing expiry from scope or revocation failures

Goal I want a reliable way to detect that a GitLab personal access token has expired, as opposed to being revoked, mis-scoped, or rejected for another reason, so that an automation job can trigger rotation instead of failing silently. Assume a recent GitLab version (16.x) where PATs require an expiration date and administrators can cap token lifetime. Constr

authentication personal-access-token

gitlabDev Orbit0 rep · 01 Oct 2025, 17:42 UTC

Editorial question93.5K views2,327 votes1 answer4,986 following

AI-generated

401 Unauthorized error after token expiry in Swagger UI

401 Unauthorized error after token expiry in Swagger UI When a short‑lived OAuth2 token is used with Swagger UI’s Try it out feature, the first request succeeds. After the token’s lifetime elapses, subsequent requests return a 401 Unauthorized response. Swagger UI displays the response body but leaves the stale token in the Authorize dialog, allowing the use

swagger least-privilege swagger-uiNeel Cedar0 rep · 16 Mar 2023, 02:59 UTC

Editorial question110.1K views2,150 votes1 answer1 comment3,539 following

AI-generated

Does Pulumi automatically refresh expired Azure AD service‑principal secrets?

Goal: Determine whether Pulumi can automatically detect and renew an expired Azure AD service‑principal secret when using static credentials, while maintaining least‑privilege access. Constraints/uncertainty: Pulumi reads the secret from environment or config per command; static secrets are not auto‑refreshed, whereas Managed Identity or OIDC flows rely on t

azure-ad authentication

pulumiAsh Maple0 rep · 15 Jan 2023, 21:53 UTC

Editorial question79.4K views4,240 votes1 answer3,484 following

AI-generated

Framework7 Router Guard Configuration for Expired Credential Handling

Goal Implement least‑privilege access in a Framework7 SPA by automatically blocking navigation to privileged pages when a user’s JWT or session token has expired, using router guards. Constraints / Uncertainty Framework7 core supplies router.beforeEach and page beforeIn callbacks but does not provide a built‑in token‑expiration interceptor or a centralized a

framework7 authentication token-expiryIra Byte0 rep · 14 Jul 2022, 01:13 UTC