ContextQMD
Back to Gitlabhq

GitLab Duo Agent Platform authentication

doc/user/duo_agent_platform/authentication.md

18.11.21001 B
Original Source

GitLab Duo Agent Platform uses a multi-token authentication chain before requests reach a model provider.

The following table lists the token types and time-to-live (TTL) for each token.

TokenIssuerTTLRefresh behavior
Cloud Connector JWT (self-signed)GitLab Dedicated instanceOne hourIn each request.
CustomersDot service access tokencustomers.gitlab.comApproximately three daysIn an hourly cron when fewer than 2 days remain.
OAuth access tokenGitLab Dedicated instanceTwo hoursIn each workflow.
GitLab Duo Workflow Service Internal JWTGitLab Duo Workflow Service1 hourIn each workflow with the GenerateToken RPC.
GLGO exchange JWTAI Gateway1 hourIn each request.