Sec-Private-State-Token-Lifetime header
Experimental: This is an experimental technology
Check the Browser compatibility table carefully before using this in production.
The HTTP Sec-Private-State-Token-Lifetime Response Header is used by the Private State Token API during token redemption. It is sent by the redeemer server to indicate to the browser how long (in seconds) a redemption record should be cached for. The redemption record itself is sent in a Sec-Private-State-Token response header.
If the Sec-Private-State-Token-Lifetime header is omitted, the lifetime of the redemption record will be tied to the lifetime of the token verification key that confirmed the redeemed token's issuance.
| Header type | Response Header |
|---|---|
| CORS-safelisted request header | No |
Syntax
Sec-Private-State-Token-Lifetime: <integer>
Servers should ignore this header if it contains any other value.
Directives
<integer>-
An integer specifying the lifetime of the sent redemption record in seconds.
Examples
Sec-Private-State-Token-Lifetime: 604800
Specifications
| Specification |
|---|
| Private State Token API # sec-private-state-token-lifetime |
Browser compatibility
| desktop | mobile | |||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
Sec-Private-State-Token-Lifetime
|
|
|
|
|
|
|
|
|
|
|
|
|
Legend
Tip: you can click/tap on a cell for more information.
- Full support
- Full support
- No support
- No support
- Experimental. Expect behavior to change in the future.