Behavior when changing token security policies

When changing the security policies affecting API tokens:

  • If you disable a token type (by removing the check in the checkbox), the system will immediately delete all existing API tokens of this type and provide a warning.

  • When changing the expiration value of a token:

    • If a token has not yet expired, but its current expiration is set to outside of the interval, the expiration will be adjusted to the maximum time left for the token.

    • If an existing token's expiration is beyond the configured time in the new policy, the tokens will be deleted.

    • If an existing token is within the new timeframe, the token will continue to function until the expiration time.

This behavior can be used to immediately remove access for existing tokens if they have been created.