resolver

Aliases: account_resolver, account_resolvers

Hot Reloadable

Resolver settings are rebuilt and swapped in on reload, but moving to or from an account resolver — enabling or disabling it — fails the reload.

Takes precedence over the value obtained from the operator if defined.

If a string value is used, it must be MEMORY or URL(<url>) where where url is an HTTP endpoint pointing to the NATS account resolver.

Note: the NATS account resolver is deprecated and the built-in NATS-based resolver should be used.

Types

Type	Description	Choices
string		-
object	An object with a set of explicit properties that can be set.	-

Properties

Name	Description	Type	Default	Reloadable
type	Defines whether the resolver type. A full resolver stores all account JWTs unless they are explicitly deleted. A cache resolver stores only a subset based on a least-recently-used (LRU) TTL.	string	-	Yes*
dir	The path to storing account JWT files when pushed to the server.	string	-	Yes*
limit	If set, limit the number of stored JWTs. In full mode, new JWTs will be rejected where as in cache mode, old JWTs will be evicted for new JWTs.	integer	-	Yes*
ttl	If cache mode, defines how long an account JWT will be cached for before being considered for auto-eviction.	duration	-	Yes*
interval	Defines the interval the resolver will randomly contact another server to reconcile JWTs, such as receiving new ones and deleting old ones. Applies to full mode only.	duration	-	Yes*
timeout	Defines the request timeout for resolvers interacting with with other resolvers.	duration	-	Yes*
allow_delete	If true, allows JWTs to be deleted. Note, in full mode, this will result in the JWT file being renamed to with a .delete suffix, unless hard_delete is true.	boolean	false	Yes*
hard_delete	If true, and the resolver is in full mode, deleted account JWTs will be removed from disk rather than having the .delete suffix appended.	boolean	false	Yes*

* See the property page for reload caveats.