Skip to main content

PAIRING_CODE_TTL

Constant PAIRING_CODE_TTL 

pub const PAIRING_CODE_TTL: Duration;
Expand description

How long a freshly minted pairing code stays redeemable.

The code is the SOLE bearer credential for the certificate-issuance endpoint, and it is displayed on a console and written to logs, so its value has to stop being useful shortly after the operator has used it. One-time use alone left a copied code redeemable indefinitely and gave an online guesser unlimited wall-clock against a six-digit space.