Hey team. Quick question… what is the lifetime of the jwt token? I think I read somewhere that it is 12 hours. Well, it seems to me to be 12 hours and 5 minutes. So, Chris, I am going back through the tutorial for the Ziti host access that you wrote for me. The issue, is that the jwt token is o…

OK - this just got wierder. I copied that file into ziti-edge-router docker container which is using UTC for it time, so would have expected this to work. Timestamp is 10:51 and it is saying that it is expired by 24m6s (localtime was ~11:24pm).

The JWT life is configurable. The OpenZiti controller config has the setting you wnat to change to make it longer: edgeIdentity: # duration - optional, default 5m # The length of time that a Ziti Edge Identity enrollment should remain valid. After # this duration, the enrollme…

Thanks for the clarification. To assist those who come here later, where does that config file live?

Oooh… this is actually a really valid point specifically for the docker-compose environment. In the compose environment it’s trickier. For docker-compose, that will be located at /openziti/ziti-edge-controller.yaml. Docker compose reuses the same volume for all the containers that get launched so yo…

@TheLumberjack - Just doing some reading about 3rd party certs, as that is my next shiny object to play with. However, on this page: https://openziti.github.io/ziti/identities/overview.html?tabs=tabid-new-ca-ui%2Ctabid-new-identity-ui , under OTT, there is this sentence... One time tokens are del…

Oh yeah… That should be stated differently. Might have been true back when that page was written, also might have been a typo even then. The default is changing to 3 hours but it’s not released yet. Regardless that should read that it’s “configurable and set via the controller”… I’ll file a bug. Wh…

doc bug filed Correctly identity jwt timeouts · Issue #114 · openziti/ziti-doc · GitHub ziti edge controller enhancement Allow configuration to be set dynamically · Issue #751 · openziti/ziti · GitHub

Jwt lifetime of 5 minutes

TheLumberjack Split this topic August 24, 2025, 3:34pm 9

A post was split to a new topic: Setting JWT lifetime

Topic		Replies	Views
Setting JWT lifetime Ziti Overlay	21	120	September 1, 2025
Enrollment succeeds with expired JWT Support	7	109	November 21, 2024
Bound to old controller / running ziti in production using docker Ziti Desktop Edge for Windows	13	414	June 7, 2022
Linux ext-jwt-signer w/Google OIDC General Questions	12	120	July 1, 2025
ZDEW IDP auth timeout, search domains, ext jwt posture check Ziti Desktop Edge for Windows	3	76	March 21, 2025

Jwt lifetime of 5 minutes

Related topics