token_lifetime_exceeds_policy

HTTP status: 403 Forbidden

The organization caps how long personal access tokens may last, an Owner has turned on Refuse existing tokens over the limit, and this token runs past the cap. A token that never expires always does. See Maximum token lifetime.

Only this organization refuses the token. It still works in the owner’s other organizations, unless they set a limit of their own.

Common causes

• The token was created with no expiry, or a far-off one, before the organization set its limit.
• The organization lowered its limit, say from 365 days to 90, after the token was made.

How to fix

• Create a new personal access token. The form only offers expiry dates inside the limit.
• Swap it into whatever used the old one, then revoke the old token.
• For automation the whole team depends on, use a service token. It belongs to the organization, and the limit doesn’t apply to it.

Example

{
  "error": "token_lifetime_exceeds_policy",
  "message": "This organization only accepts personal access tokens that expire within 90 days of being created. Create a new token with an earlier expiry.",
  "docs_url": "https://featureflip.io/docs/management-api/errors/token_lifetime_exceeds_policy"
}