http header
Sec-Private-State-Token-Lifetime header
Limited availability
The HTTP Sec-Private-State-Token-Lifetime Response Header is used by the Private State Token API during token redemption. It is sent by the redeemer server to indicate to the browser how long (in seconds) a redemption record should be cached for. The redemption record itself is sent in a Sec-Private-State-Token response header.
If the Sec-Private-State-Token-Lifetime header is omitted, the lifetime of the redemption record will be tied to the lifetime of the token verification key that confirmed the redeemed token’s issuance.
| Header type | [Response Header](https://developer.mozilla.org/en-US/docs/Glossary/Response%20Header) |
|---|---|
| [CORS-safelisted request header](https://developer.mozilla.org/en-US/docs/Glossary/CORS-safelisted%20request%20header) | No |
Syntax
Sec-Private-State-Token-Lifetime: <integer>
Servers should ignore this header if it contains any other value.
Directives
<integer>- : An integer specifying the lifetime of the sent redemption record in seconds.
Examples
Sec-Private-State-Token-Lifetime: 604800
Specifications
SpecificationsStandards references are available on the canonical MDN page.
Browser compatibility
Browser compatibilityCompatibility data is available on the canonical MDN page.