Is it possible to add expiration time to tokens of email activation?

[albjoaov]

Who needs this change would need to overwrite some structure like view or serialize? Or can we add through some parameter?

REF: https://stackoverflow.com/questions/71628282/add-expire-time-for-validation-and-verification-in-djoser

[chapimenge3]

@albjoaov

A simple answer would be yes and just add the below in your setting.

PASSWORD_RESET_TIMEOUT = 60 # in second

So what is happening is Djoser uses Django password reset functionality while generating and validating the token. So if that is the case Django already has a time out for the password reset value so you can set the above value but one catch is you will get the below error if the token is expired instead of a timeout validation error.

"token": [
     "Invalid token for given user."
 ]
}

[for the maintainer] The above issue can be fixed by only updating the Message value from djoser/constants.Messages.INVALID_TOKEN_ERROR to more descriptive value. Like

Invalid token or Expired Token for given user

Tested on my machine and it is working fine.

Hope this helps.