- Is there a support for robots? I.e. some pre-app...
# support-questions-legacy
n
- Is there a support for robots? I.e. some pre-approved PAT or similar, that doesn't expire
r
Can you elaborate on this please?
n
Let's say I want to authenticate from a CI pipeline, for example, to send logs and status from the CI run to our API server.
I'd store a pre-approved token e.g. in Github secrets or similar
r
Got it. So that's possible to do. See https://supertokens.com/docs/microservice_auth/introduction. The one known issue with this is that revoking the pre approved tokens would involve maintaining a blacklist on your side.
n
so these JWTs don't expire and are not refreshed, correct?
r
well, you can set a lifetime of 100 years so effectively they don't expire. And they don't refresh either.
n
thanks, I guess this is fine
2 Views