# Despite setting an absolute expiration time for the refresh token in auth0, I'm not getting logged out

**URL:** <https://community.auth0.com/t/despite-setting-an-absolute-expiration-time-for-the-refresh-token-in-auth0-im-not-getting-logged-out/104218>\
**Category:** Get Help\
**Tags:** admin-management, dashboard\
**Created:** [April 5, 2023, 10:40pm UTC](https://community.auth0.com/t/despite-setting-an-absolute-expiration-time-for-the-refresh-token-in-auth0-im-not-getting-logged-out/104218 "2023-04-05T22:40:22Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![wat\_01](https://upload.wikimedia.org/wikipedia/commons/thumb/7/7c/User_font_awesome.svg/768px-User_font_awesome.svg.png) [@wat\_01](https://community.auth0.com/u/wat_01)\
**Post date:** [April 5, 2023, 10:40pm UTC](https://community.auth0.com/t/despite-setting-an-absolute-expiration-time-for-the-refresh-token-in-auth0-im-not-getting-logged-out/104218/1 "2023-04-05T22:40:22Z")

</div>

As the title suggests, despite setting an absolute expiration time for the refresh token in auth0, I’m not getting logged out. Is there anything I’m doing wrong? If possible, please advise on a solution.

【Libraries Used】  
@auth0/auth0-react: 1.10.1  
next: 12.0.7

Pages that require authentication use withAuthenticationRequired.

【Management Dashboard Configuration】  
It has been set extremely short for testing purposes.

Access Token: 15 seconds  
Refresh Token Absolute Expiration: 30 seconds  
Refresh Token Rotation: Enabled

api settings

 ![スクリーンショット 2023-04-06 7.35.07](https://global.discourse-cdn.com/auth0/original/3X/c/1/c186695d1245378057b743baaefafe3759efb788.jpeg)

frontend(spa) setting

 ![スクリーンショット 2023-04-06 7.27.13](https://global.discourse-cdn.com/auth0/original/3X/f/4/f498db0b115b19ed7dd5c684890d8fc2121a0ced.jpeg)

If it is possible, I would like to change values for each application instead of changing the settings for the entire tenant.

---

<div class="post-metadata">

**Author:** ![Barbara45Fitzpatrick](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/barbara45fitzpatrick/32/45634_2.png) [@Barbara45Fitzpatrick](https://community.auth0.com/u/Barbara45Fitzpatrick)\
**Post date:** [April 6, 2023, 6:00am UTC](https://community.auth0.com/t/despite-setting-an-absolute-expiration-time-for-the-refresh-token-in-auth0-im-not-getting-logged-out/104218/2 "2023-04-06T06:00:14Z")

</div>

The user may have an active session on another device or browser: If the user has an active session on another device or browser, they will remain logged in until the session is expired or they explicitly log out.  
The client application may be using the same refresh token after it has expired: If the client application is caching the refresh token and using it after it has expired, the user will not be logged out. Ensure that your client application is properly handling expired refresh tokens.  
The absolute expiration time may not be set correctly: Double-check that the absolute expiration time for the refresh token is set correctly. Verify the expiration time in Auth0 dashboard or API, and make sure that it is being correctly communicated to the client application.  
The client application may be using a different refresh token than the one that has expired: If the client application is using a different refresh token than the one that has expired, the user will not be logged out. Ensure that your client application is using the correct refresh token.

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/auth0/original/3X/b/5/b560f266932fcce5d57f09a6595bd50518cae3f3.jpeg) [@system](https://community.auth0.com/u/system)\
**Post date:** [April 20, 2023, 6:00am UTC](https://community.auth0.com/t/despite-setting-an-absolute-expiration-time-for-the-refresh-token-in-auth0-im-not-getting-logged-out/104218/3 "2023-04-20T06:00:35Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.