Skip to main content

talos keys derive-token

talos keys derive-token​

Derive a new derived token from an existing API key

Synopsis​

Derives a new short-lived derived token from an existing opaque API key. The output will be a JWT or Macaroon token.

talos keys derive-token [api-key-token] [flags]

Options​

      --algorithm string   Algorithm for derived token (jwt or macaroon) (default "jwt")
      --claims string      Custom claims as JSON (e.g., '{"user_ip":"192.168.1.1","request_id":"abc123"}'). Reserved claims like iss, sub, exp cannot be overridden.
      --format string      Set the output format. One of table, json, yaml, json-pretty, jsonpath and jsonpointer. (default "table")
  -h, --help               help for derive-token
  -q, --quiet              Be quiet with output printing.
      --ttl string         Token time-to-live duration (e.g. '24h', '168h') (default "1h")

Options inherited from parent commands​

      --config string     path to a config file (without it, only schema defaults and TALOS_-prefixed env vars apply)
  -e, --endpoint string   HTTP server base URL including scheme, e.g. http://host:port (for client commands) (default "http://localhost:4420")

See also​

Ory Network

The largest Identity and Access Management network in the world. So you can get back to building your business.

Sign up for free