token_ttl_too_long

Token lifetime too long · HTTP 400

The access token's lifetime, exp − nbf, is over 600 seconds, or POST /v1/tokens was asked for a ttlSec over 600. A longer token is refused outright, never shortened: with this code on the control API, and as unauthenticated when a client connects with one, its detail starting token_ttl_too_long.

What to do: Mint with a lifetime of ten minutes or less. A token only has to last until the connect; the session it opens outlives it, and reconnects use new tokens.

Where it comes from:

• Control API

Branch on code; detail is for your logs and never for a user. All error codes.