Are notifications sent when API tokens are about to expire?

[Nikki Hailey]

Since API tokens will all have a expiration date of a year from now on, will admins be notified ahead of time that we need to renew?

[Dirk Ronsmans]

@Nikki Hailey ,

Yes, you should get an email a day before the token actually expires with the name and the name of the token.  

it might be a bit short notice so I recommend adding a reminder yourself too. 
keep in mind as these are personal tokens, only the person it belongs too will get notified. 

[Justin Goldberg]

Hopefully we can configure the notification date because if it expires on a Monday, getting an alert on a Sunday wont be helpful. Even a day may not be enough to change and test it.

[Trudy Claspill]

@Justin Goldberg 

There is currently no option to configure how far in advance the token expiration email will be sent.

I recommend that you provide that feedback directly to Atlassian through a support ticket or using the Feedback option available from the Help menu.

[Nikki Hailey]

Hmmm... This token was for an integration, and I was hoping it would go to the admin team in case I happen to not be with the company any more. Seems like you should be able to at least choose to send notifications to multiple people to CYA.

[Trudy Claspill]

If you leave the company I'm assuming your company would disable your account in which case the token will become unusable at that moment.

Tokens that support an integration used by teams or larger organization should generally be based on service accounts rather than an individual user's account, so that the integration doesn't stop working if the individual's account is disabled.

It would also be a good idea to have a recurring task in your team's backlog to periodically check tokens that are known to be used for integration and proactively generate new tokens.