- Ya
- 10 Julai 2026, 00:04 UTC
- Mwandishi
- Kamo
- Ahadi ya
- 3996020
MeridianLinkAuthService mints and caches the sTicket per (instanceBaseUrl + sha256(clientSecret)) with an injected Supplier<Instant> clock and a configurable TTL **************** default 20 min). oauth mode frames the exchanged token as "Bearer {token}"; legacy mode (meridianlink.auth.mode) returns the GetPmlUserAuthTicket ticket verbatim. Token exchange is isolated behind MeridianLinkTokenExchanger (default OAuth client_credentials POST via **************** so the cache/TTL contract is testable with a fake.