How to Invalidate JSON Web Tokens (JWT) for global registration in Satellite 6.17?
Issue
- How to Invalidate JSON Web Tokens (JWT) for global registration in Satellite 6.17?
When you generate a registration command in global host registration, Satellite also generates a unique JSON Web Token (JWT) that is used to authorize the registration call from a host to Satellite Server. This JWT is bound to the user that generated the registration command.
Users can configure a custom validity duration for the JWT. If the validity duration is too long or if the JWT has been compromised, the JWT poses a security concern.
Environment
- Red Hat Satellite 6.17
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.