Fief
What's the validity of refresh_token #72
-
|
Can anyone please tell for how long the refresh_token is valid before it expires? Thanks. |
Beta Was this translation helpful? Give feedback.
Replies: 1 comment
-
|
Hi @janshermarri, welcome to Fief 👋 The Bear in mind though that when you use the refresh token to get a fresh access token, you also get a new refresh token, that you should save for the future. The previous one is invalidated, you can use it only once. This is what is usually called refresh token rotation. |
Beta Was this translation helpful? Give feedback.
Hi @janshermarri, welcome to Fief 👋
The
refresh_tokenis valid for 30 days. If you self-host your Fief instance, you can customize this parameter using theREFRESH_TOKEN_LIFETIME_SECONDSenvironment variable.Bear in mind though that when you use the refresh token to get a fresh access token, you also get a new refresh token, that you should save for the future. The previous one is invalidated, you can use it only once. This is what is usually called refresh token rotation.