Given we have enabled the Refresh Token Rotation and have a refresh token family, does the whole family expire at any time or does it only expire when the latest refresh token’s absolute lifetime is reach.
If thats the case does this mean if a refresh token is used to get a new access token everytime before the Refresh Token’s Absolute Lifetime is hit that you can use this Refresh Token Family
theoretically forever?
Hi,
I have the same question. And my research points me to: yes indeed “child refresh tokens” get expired at the end of “parent refresh token” expiration lifetime. No matter what. Their expiration date does not get pushed in the future as you issue new “child tokens”.
But I need confirmation like you.
Hey there @benoit and @CloudNStoyan !
That’s correct - All tokens within the same family will expire at the absolute expiration.
This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.