Skip to content

A question about token refreshing with oauth.v2.access #1008

Answered by seratch
WZRPW asked this question in Q&A
Discussion options

You must be logged in to vote
  1. does the refresh token have an expiring date/time? The API response only has expire_in for the access token.

Until you use the refresh token for rotating the access token, the refresh token can be valid.

  1. When using the refresh token to acquire a new access token, the response will contain a new refresh token. Will the old refresh token be in-validated (or expire) after the token-refresh API call?

The current one and its previous generation can be valid. When you rotate tokens again with the refresh token and access token, the old one will expire.

Replies: 1 comment

Comment options

You must be logged in to vote
0 replies
Answer selected by kanata2
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Category
Q&A
Labels
None yet
2 participants