{"id":41591590,"url":"https://github.com/opensciencegrid/osg-token-renewer","last_synced_at":"2026-01-24T09:33:59.352Z","repository":{"id":40536189,"uuid":"394390753","full_name":"opensciencegrid/osg-token-renewer","owner":"opensciencegrid","description":"oidc-agent token renewal service and timer","archived":false,"fork":false,"pushed_at":"2024-02-13T17:27:51.000Z","size":52,"stargazers_count":0,"open_issues_count":2,"forks_count":5,"subscribers_count":8,"default_branch":"master","last_synced_at":"2024-04-16T19:14:04.631Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/opensciencegrid.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null}},"created_at":"2021-08-09T18:00:29.000Z","updated_at":"2021-10-13T20:04:22.000Z","dependencies_parsed_at":"2024-01-31T22:25:47.559Z","dependency_job_id":"2a1a3a89-009e-44e8-86bd-a8911816576e","html_url":"https://github.com/opensciencegrid/osg-token-renewer","commit_stats":null,"previous_names":[],"tags_count":18,"template":false,"template_full_name":null,"purl":"pkg:github/opensciencegrid/osg-token-renewer","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/opensciencegrid%2Fosg-token-renewer","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/opensciencegrid%2Fosg-token-renewer/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/opensciencegrid%2Fosg-token-renewer/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/opensciencegrid%2Fosg-token-renewer/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/opensciencegrid","download_url":"https://codeload.github.com/opensciencegrid/osg-token-renewer/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/opensciencegrid%2Fosg-token-renewer/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":28723277,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-01-24T08:27:05.734Z","status":"ssl_error","status_checked_at":"2026-01-24T08:27:01.197Z","response_time":89,"last_error":"SSL_connect returned=1 errno=0 peeraddr=140.82.121.6:443 state=error: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2026-01-24T09:33:59.284Z","updated_at":"2026-01-24T09:33:59.343Z","avatar_url":"https://github.com/opensciencegrid.png","language":"Python","funding_links":[],"categories":[],"sub_categories":[],"readme":"The OSG Token Renewal Service\n----------------------------- \n\nThe OSG token renewal service is set up as a \"oneshot\" systemd service,\nwhich runs under the `osg-token-svc` user, sets up an `oidc-agent`,\nadds the relevant OIDC client accounts as specified in the `config.ini`\nwith `oidc-add`, and generates the tokens with `oidc-token`.\n\nThis service is set to run via a systemd timer approximately every 15 minutes.\n\nIf you would like to run the service manually at a different time (e.g., to generate\nall the tokens immediately), you can run the service once with:\n\n```console\nroot@host # systemctl start osg-token-renewer\n```\n\nIf this succeeds, the new token will be written to the location you configured\nfor `token_path` (`/etc/osg/tokens/\u003cACCOUNT_SHORTNAME\u003e.token`, by convention).\n\nFailures can be diagnosed by running:\n\n```console\nroot@host # journalctl -eu osg-token-renewer\n```\n\n\nConfiguring the OSG Token Renewal Service\n----------------------------------------- \n\nThe main configuration file for the service is `/osg/token-renewer/config.ini`.\n\nFor each OIDC Client, you will add an `account` section to the config file.\nFor each token you wish to generate for this client account,\nyou will configure a `token` section with any relevant options.\n\nExamples of this can be found in the `/osg/token-renewer/config.ini` that gets\ninstalled with the package.\n\nEach `[account \u003cACCOUNT_SHORTNAME\u003e]` section corresponds to a client account\nnamed `\u003cACCOUNT_SHORTNAME\u003e`, set up with the `oidc-gen` tool, run by the\n`osg-token-renewer-setup.sh` script.\n\nIn this `account` section, the `password_file` option is a path to a file\nyou create as `root` with the encryption password to be used for this client\naccount.\n\nDetails for this configuration can be found in the\n[documentation here](https://opensciencegrid.org/docs/other/osg-token-renewer/#configuring-tokens).\n\nFor each client account, you can configure one or more `[token \u003cTOKEN_NAME\u003e]`\nsections, where `\u003cTOKEN_NAME\u003e` is a unique name of your choosing.\nThese sections describe how to create the token with the `oidc-token` tool.\nFor details, see the \n[documentation here](https://opensciencegrid.org/docs/other/osg-token-renewer/#configuring-accounts).\n\n\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fopensciencegrid%2Fosg-token-renewer","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fopensciencegrid%2Fosg-token-renewer","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fopensciencegrid%2Fosg-token-renewer/lists"}