fix update machine params + default to no max ttl

backend/src/ee/controllers/v1/machineIdentitiesController.ts

@@ -557,6 +557,10 @@ export const createMachineIdentity = async (req: Request, res: Response) => {
         }
     } = await validateRequest(reqValidator.CreateMachineIdentityV1, req);
 
+    if (accessTokenMaxTTL > 0 && accessTokenTTL > accessTokenMaxTTL) {
+        throw BadRequestError({ message: "Access token TTL cannot be greater than max TTL" })
+    }
+
     const { permission } = await getAuthDataOrgPermissions({
         authData: req.authData,
         organizationId: new Types.ObjectId(organizationId)
@@ -676,10 +680,15 @@ export const updateMachineIdentity = async (req: Request, res: Response) => {
             clientSecretTrustedIps,
             accessTokenTrustedIps,
             accessTokenTTL,
-            accessTokenNumUsesLimit
+            accessTokenNumUsesLimit,
+            accessTokenMaxTTL
         }
     } = await validateRequest(reqValidator.UpdateMachineIdentityV1, req);
 
+    if (accessTokenTTL && accessTokenMaxTTL > 0 && accessTokenTTL > accessTokenMaxTTL) {
+        throw BadRequestError({ message: "Access token TTL cannot be greater than max TTL" })
+    }
+
     const machineMembershipOrg = await MachineMembershipOrg
         .findOne({
             machineIdentity: new Types.ObjectId(machineId)
@@ -779,7 +788,8 @@ export const updateMachineIdentity = async (req: Request, res: Response) => {
             clientSecretTrustedIps: reformattedClientSecretTrustedIps,
             accessTokenTrustedIps: reformattedAccessTokenTrustedIps,
             accessTokenTTL,
-            accessTokenNumUsesLimit
+            accessTokenNumUsesLimit,
+            accessTokenMaxTTL
         },
         {
             new: true

backend/src/validation/machineIdentity.ts

@@ -58,15 +58,11 @@ export const CreateMachineIdentityV1 = z.object({
       .min(1)
       .default([{ ipAddress: "0.0.0.0/0" }]),
     accessTokenTTL: z.number().int().min(0).default(7200),
-    accessTokenMaxTTL: z.number().int().min(0).default(7200),
+    accessTokenMaxTTL: z.number().int().min(0).default(0),
     accessTokenNumUsesLimit: z.number().int().min(0).default(0)
   })
-  .refine(data => data.accessTokenTTL <= data.accessTokenMaxTTL, {
-    message: "accessTokenTTL cannot be greater than accessTokenMaxTTL",
-    path: ["accessTokenTTL"],
-  })
 });
-  
+
 export const UpdateMachineIdentityV1 = z.object({
   params: z.object({
     machineId: z.string()
@@ -89,7 +85,8 @@ export const UpdateMachineIdentityV1 = z.object({
       .min(1)
       .optional(),
     accessTokenTTL: z.number().int().min(0).optional(),
-    accessTokenNumUsesLimit: z.number().int().min(0).optional()
+    accessTokenNumUsesLimit: z.number().int().min(0).optional(),
+    accessTokenMaxTTL: z.number().int().min(0).default(0),
   }),
 });
 

frontend/src/hooks/api/machineIdentities/mutations.tsx

@@ -81,7 +81,8 @@ export const useUpdateMachineIdentity = () => {
             clientSecretTrustedIps,
             accessTokenTrustedIps,
             accessTokenTTL,
-            accessTokenNumUsesLimit
+            accessTokenNumUsesLimit,
+            accessTokenMaxTTL
         }) => {
             
             const { data: { machineIdentity } } = await apiRequest.patch(`/api/v1/machine-identities/${machineId}`, {
@@ -90,7 +91,8 @@ export const useUpdateMachineIdentity = () => {
                 clientSecretTrustedIps,
                 accessTokenTrustedIps,
                 accessTokenTTL,
-                accessTokenNumUsesLimit
+                accessTokenNumUsesLimit,
+                accessTokenMaxTTL
             });
 
             return machineIdentity;

frontend/src/views/Org/MembersPage/components/OrgMachineIdentityTab/components/MachineIdentitySection/AddMachineIdentityModal.tsx

@@ -109,7 +109,7 @@ export const AddMachineIdentityModal = ({
         defaultValues: {
             name: "",
             accessTokenTTL: "7200",
-            accessTokenMaxTTL: "7200",
+            accessTokenMaxTTL: "0",
             accessTokenNumUsesLimit: "0",
             clientSecretTrustedIps: [{
                 ipAddress: "0.0.0.0/0"
@@ -177,7 +177,7 @@ export const AddMachineIdentityModal = ({
             reset({
                 name: "",
                 accessTokenTTL: "7200",
-                accessTokenMaxTTL: "7200",
+                accessTokenMaxTTL: "0",
                 accessTokenNumUsesLimit: "0",
                 role: roles[0].slug,
                 clientSecretTrustedIps: [{