Field MaximumLifetime

Namespace

MailFathom.Common.ClientAssertions

Assembly

MailFathom.Common.dll

The longest window an assertion may claim between the moment it is verified and its own expiry.

public static readonly TimeSpan MaximumLifetime

Returns

TimeSpan

The longest window an assertion may claim between the moment it is verified and its own expiry.

Remarks

This is the setting a shared secret does not have. A captured API key works until an operator notices; a captured assertion stops working within this window whatever anyone does, which is the posture the method exists for. It is a constant rather than a setting for the reason every other acceptance rule this deployment applies to a signed credential is one: a deployment able to widen it would eventually be a deployment that had.

It also bounds what the endpoint has to remember. An identifier is kept only until the assertion carrying it expires, so the replay store holds no more than one window's worth of a client's requests — which the surface's own rate limit already bounds.