Different JWT expiration times based on how they are generated

[dan]

I’d like to have a longer expiration on access tokens issued from the API vs tokens issued from the OpenID Connect workflow.

Is there a way to override the JWT duration from the API or use different settings for the API?

[dan]

The JWT TTL can be configured per application, so if you were using a different application for OIDC vs an API - then you could do it.

But if you don't want to use multiple applications, then it is not possible, at least currently.

I could see a use case for asking for a JWT with a TTL equal to or less than the configuration and that request being honored, that could be a feature request. But as of right now, the only option is different applications.