Recently released VMware Cloud Director 10.6.1 adds support for enforcement of maximum duration of API Tokens. It is API only feature configured with the following call:
PUT https://{{host}}/cloudapi/1.0.0/site/settings
Accept: application/json;version=39.1
Content-Type: application/json
Body:
{
"apiTokenDuration": 180
}The duration is set in days.
The config applies for the whole VCD instance. So if you use this feature remember to refresh your tokens regularly in any solutions using this method of authentication.
