Rhythm 2.0 Specifications

Appearance

WF-PFM-INT-005Keep credentials current

Markdown

WF-PFM-INT-005

Keep credentials current

Markdown
  • DocumentDraft
  • ImplementationObserved

Planning

Implements
CAP-PFM-INT-005, CAP-PFM-INT-006

KindWorkflowProduct areaPlatformModuleIntegration access, customer extensions and shared workflow configurationRevision1

Read atservices-platform ad3f6a65

Keep credentials current ​

What It Does ​

Scheduled refresh keeps sign-in credentials usable, while daily maintenance reconciles secret deletion, upcoming refresh-token expiry and abandoned authorization state. A provider refusal changes account eligibility. Administrator email follows the committed change as a best-effort notice.

The Flow ​

When Something Fails ​

A later scheduled pass revisits due work; silence and failure metrics reveal missed work. Credentials can expire while processing is delayed. Credential refusal requires reauthorization; other refresh errors wait for a later pass. A temporary provider failure can leave a token near expiry. Mail failure is recorded in logs without undoing the transition. The account remains blocked even if its administrators are not notified. Log a workspace failure and continue the pass. Cleanup metadata can lag secret-storage deletion.

Open Design Questions ​

The rotation-date branch is dormant because no examined writer supplies its trigger. Notification delivery remains best effort.

Controls

44 controls apply, from the corpus control catalogue.

TC-AVL-001 TC-AVL-004 TC-AVL-005 TC-AZ-001 TC-AZ-002 TC-AZ-003 TC-AZ-004 TC-CRY-001 TC-CRY-002 TC-CRY-003 TC-CRY-004 TC-DAT-001 TC-DAT-002 TC-DAT-003 TC-DAT-004 TC-IAM-001 TC-IAM-002 TC-IAM-004 TC-IAM-005 TC-IAM-006 TC-LOG-001 TC-LOG-002 TC-LOG-003 TC-LOG-004 TC-LOG-005 TC-MON-001 TC-MON-002 TC-PI-001 TC-PI-002 TC-PI-003 TC-PI-004 TC-PI-005 TC-PRV-001 TC-PRV-002 TC-SEC-001 TC-SEC-002 TC-SEC-003 TC-SEC-004 TC-TEN-001 TC-TEN-002 TC-TEN-003 TC-VEN-001 TC-VEN-002 TC-VEN-003

The Markdown files under specs/ in rhythmsoftware/rhythm-v2-docs are the canonical source of truth. This reader is a generated, read-only projection of them.

Rhythm Software