Update Macaroon claims/constraints for OIDC token minting · Issue #10792 · pypi/warehouse (original) (raw)

We're going to want to mint short-lived Warehouse API tokens (which are Macaroons) based on incoming OIDC JWTs.

As part of the "short-lived" part, we'll need need to make sure the tokens support some kind of expiration claim.