Skip to content

Commit

Permalink
small changes
Browse files Browse the repository at this point in the history
  • Loading branch information
rishabhpoddar committed Oct 28, 2024
1 parent fcc5968 commit 229db03
Show file tree
Hide file tree
Showing 2 changed files with 2 additions and 4 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -155,8 +155,7 @@ There are no limits on the duration of each token.

### Disable Refresh Token Rotation

By default, the **OAuth2 Refresh Token** wil expire after 30 days.
If your use case cannot accomodate the process of changing the [**OAuth2 Refresh Token**](/docs/unified-login/introduction#oauth2-refresh-token) for a new one, you can make it so that this behavior does not apply for your implementation.
By default, a refresh token is one time use. This means, once a refresh token is used to get a new access token, it cannot be used again. If your use case cannot accomodate the process of changing the [**OAuth2 Refresh Token**](/docs/unified-login/introduction#oauth2-refresh-token) for a new one, you can make it so that this behavior does not apply for your implementation.

In order to achieve this behavior just set the `enableRefreshTokenRotation` property to `false` in the [**Client**](/docs/unified-login/introduction#client) creation request body.

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -161,8 +161,7 @@ There are no limits on the duration of each token.

### Disable Refresh Token Rotation

By default, the **OAuth2 Refresh Token** wil expire after 30 days.
If your use case cannot accomodate the process of changing the [**OAuth2 Refresh Token**](/docs/unified-login/introduction#oauth2-refresh-token) for a new one, you can make it so that this behavior does not apply for your implementation.
By default, a refresh token is one time use. This means, once a refresh token is used to get a new access token, it cannot be used again. If your use case cannot accomodate the process of changing the [**OAuth2 Refresh Token**](/docs/unified-login/introduction#oauth2-refresh-token) for a new one, you can make it so that this behavior does not apply for your implementation.

In order to achieve this behavior just set the `enableRefreshTokenRotation` property to `false` in the [**Client**](/docs/unified-login/introduction#client) creation request body.

Expand Down

0 comments on commit 229db03

Please sign in to comment.