# Clarification about refreshing access token

**URL:** <https://community.auth0.com/t/clarification-about-refreshing-access-token/184513>\
**Category:** Get Help\
**Tags:** sessions, access-token\
**Created:** [March 26, 2025, 11:16am UTC](https://community.auth0.com/t/clarification-about-refreshing-access-token/184513 "2025-03-26T11:16:36Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![stefan.boitschuk](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/stefan.boitschuk/32/51785_2.png) [@stefan.boitschuk](https://community.auth0.com/u/stefan.boitschuk)\
**Post date:** [March 26, 2025, 11:16am UTC](https://community.auth0.com/t/clarification-about-refreshing-access-token/184513/1 "2025-03-26T11:16:36Z")

</div>

Hi,  
i use `react-native-auth0` in my react native expo app and have refresh token rotation enabled. Once the access token is expired I call the `getCredentials()` hook to request a new token pair. The way i currently understand it is, the maximum refresh token lifetime is not reset after a new token pair is issued.

I did a test with:  
Access Token life time: 5 seconds  
Maximum refresh token life time: 10 seconds  
Login → 6 seconds wait → getCredentials() call: new token pair is issued → 6 seconds wait → getCredentials() call: the refresh fails → new login is required

Is this the way it should work or have I overlooked something here?

---

<div class="post-metadata">

**Author:** ![rueben.tiow](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/rueben.tiow/32/11646_2.png) [@rueben.tiow](https://community.auth0.com/u/rueben.tiow)\
**Post date:** [March 26, 2025, 5:51pm UTC](https://community.auth0.com/t/clarification-about-refreshing-access-token/184513/3 "2025-03-26T17:51:24Z")

</div>

Hi @stefan.boitschuk,

Welcome to the Auth0 Community!

> [@stefan.boitschuk](#):
>
> The way i currently understand it is, the maximum refresh token lifetime is not reset after a new token pair is issued.

Yes, this is correct! The maximum token lifetime of a refresh token does not extend when tokens are rotated.

I recommend taking a look at our [Configure Refresh Token Rotation](https://auth0.com/docs/secure/tokens/refresh-tokens/configure-refresh-token-rotation#:~:text=The%20default%20refresh%20token%20expiration%20period%2C%20when%20Refresh%20Token%20Rotation%20is%20enabled%2C%20is%2030%20days%20(2%2C592%2C000%20seconds).%20You%20can%20configure%20up%20to%201%20year%20(31%2C557%2C600%20seconds).%20The%20lifetime%20does%20not%20extend%20when%20tokens%20are%20rotated.) which mentions this.

Let me know if you have any other questions.

Thanks,  
Rueben

---

<div class="post-metadata">

**Author:** ![stefan.boitschuk](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/stefan.boitschuk/32/51785_2.png) [@stefan.boitschuk](https://community.auth0.com/u/stefan.boitschuk)\
**Post date:** [March 27, 2025, 3:49pm UTC](https://community.auth0.com/t/clarification-about-refreshing-access-token/184513/4 "2025-03-27T15:49:04Z")

</div>

HI @rueben.tiow,

thanks for the quick replay and clarification.

many thanks

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/auth0/original/3X/b/5/b560f266932fcce5d57f09a6595bd50518cae3f3.jpeg) [@system](https://community.auth0.com/u/system)\
**Post date:** [April 10, 2025, 3:49pm UTC](https://community.auth0.com/t/clarification-about-refreshing-access-token/184513/5 "2025-04-10T15:49:42Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.