I am using the universal login with an SPA set up - I am getting the following in my response after a success: #access_token=xxxx&scope=openid%20email&expires_in=7200&token_type=Bearer&state=MDQkAvqN1rlY0w1yCcn9XX1f88ypm5Y1&id_token=xxxx How do I control the expires_in value?

When you add the audience param to your token request you are associating with an API. Are you adding any audience to your request?

Hi @Gratus-BenchSci , Checkout this doc on token expiration: [image] Update Access Token Lifetime Describes how to update the access token lifetime for an API using the Auth0 Dashboard.

Hi Dan, I’ve read that part - but how do I associate an “API” to a “SPA” client? When I pick a machine-to-machine client, the API option is there - but for a SPA client that is no visible.

I believe we are not. Thank you - let me try that out.

Control expires_in value for SPA

Get Help

Topic		Replies	Views
Make SPA access token lifetime shorter than M2M access tokens Get Help apis , application	1	718	August 2, 2023
How do SPA access token expires when used against custom API to authenticate Get Help	1	4734	February 28, 2022
Various timeouts and expirations- please clarify Get Help auth0 , timeout , expiration	1	3261	June 30, 2020
Renew access token without reference token Get Help spa , access-token , renew	1	4055	May 7, 2018
SPA and API scenario - restrict API access Get Help apis , application	1	1893	February 17, 2023

Control expires_in value for SPA

Related topics