- Shipped
- July 10, 2026 at 12:04 AM UTC
- Author
- Kamo
- Commit
- 3996020
MeridianLinkAuthService mints and caches the sTicket per (instanceBaseUrl + sha256(clientSecret)) with an injected Supplier<Instant> clock and a configurable TTL **************** default 20 min). oauth mode frames the exchanged token as "Bearer {token}"; legacy mode (meridianlink.auth.mode) returns the GetPmlUserAuthTicket ticket verbatim. Token exchange is isolated behind MeridianLinkTokenExchanger (default OAuth client_credentials POST via **************** so the cache/TTL contract is testable with a fake.