Skip to content

Commit

Permalink
Merge pull request #1692 from Paultdx/recommend-explicit-expires-in
Browse files Browse the repository at this point in the history
Recommend explicit expires_in in initializer
  • Loading branch information
nbulaj committed Feb 24, 2024
2 parents 00dceac + 832e2ab commit 960f150
Showing 1 changed file with 4 additions and 1 deletion.
5 changes: 4 additions & 1 deletion lib/generators/doorkeeper/templates/initializer.rb
Original file line number Diff line number Diff line change
Expand Up @@ -91,7 +91,10 @@
# authorization_code_expires_in 10.minutes

# Access token expiration time (default: 2 hours).
# If you want to disable expiration, set this to `nil`.
# If you set this to `nil` Doorkeeper will not expire the token and omit expires_in in response.
# It is RECOMMENDED to set expiration time explicitly.
# Prefer access_token_expires_in 100.years or similar,
# which would be functionally equivalent and avoid the risk of unexpected behavior by callers.
#
# access_token_expires_in 2.hours

Expand Down

0 comments on commit 960f150

Please sign in to comment.