Expire At a Specific Time

In this guide, you'll learn how you can configure a Grant Kit to automatically revoke access to a grant after some date. You'll do this by importing and using an expiration policy Abbey provides out-of-the-box.

We will be using the Expire After a Duration guide as a base and modify it to this use case.

Step 1: Configure Your Policy

Write your policy using Abbey's expiration helper functions.

package common

import data.abbey.functions

allow[msg] {
  msg := "granting access funtil 06/15/2023 4am UTC."

Unlike the functions.expire_after helper which uses a duration, the functions.expire_at takes an RFC 3339 datetime string.

Abbey revokes grants in realtime. When the date and time is reached, the grant will be revoked immediately.

Last updated