# Does a refresh token's family that is in a rotation expire when used within a refresh token's absolute lifetime

**URL:** <https://community.auth0.com/t/does-a-refresh-tokens-family-that-is-in-a-rotation-expire-when-used-within-a-refresh-tokens-absolute-lifetime/128150>\
**Category:** Get Help\
**Tags:** rotating-refresh-tokens, sessions\
**Created:** [February 23, 2024, 11:39am UTC](https://community.auth0.com/t/does-a-refresh-tokens-family-that-is-in-a-rotation-expire-when-used-within-a-refresh-tokens-absolute-lifetime/128150 "2024-02-23T11:39:10Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![CloudNStoyan](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/cloudnstoyan/32/55090_2.png) [@CloudNStoyan](https://community.auth0.com/u/CloudNStoyan)\
**Post date:** [February 23, 2024, 11:39am UTC](https://community.auth0.com/t/does-a-refresh-tokens-family-that-is-in-a-rotation-expire-when-used-within-a-refresh-tokens-absolute-lifetime/128150/1 "2024-02-23T11:39:10Z")

</div>

Given we have enabled the Refresh Token Rotation and have a refresh token family, does the whole family expire at any time or does it only expire when the latest refresh token’s absolute lifetime is reach.

If thats the case does this mean if a refresh token is used to get a new access token everytime before the Refresh Token’s Absolute Lifetime is hit that you can use this Refresh Token Family  
theoretically forever?

---

<div class="post-metadata">

**Author:** ![benoit](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/benoit/32/53362_2.png) [@benoit](https://community.auth0.com/u/benoit)\
**Post date:** [March 27, 2024, 4:33pm UTC](https://community.auth0.com/t/does-a-refresh-tokens-family-that-is-in-a-rotation-expire-when-used-within-a-refresh-tokens-absolute-lifetime/128150/3 "2024-03-27T16:33:25Z")

</div>

Hi,

I have the same question. And my research points me to: yes indeed “child refresh tokens” get expired at the end of “parent refresh token” expiration lifetime. No matter what. Their expiration date does not get pushed in the future as you issue new “child tokens”.

But I need confirmation like you.

---

<div class="post-metadata">

**Author:** ![ty.frith](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/ty.frith/32/58484_2.png) [@ty.frith](https://community.auth0.com/u/ty.frith)\
**Post date:** [March 29, 2024, 7:52pm UTC](https://community.auth0.com/t/does-a-refresh-tokens-family-that-is-in-a-rotation-expire-when-used-within-a-refresh-tokens-absolute-lifetime/128150/4 "2024-03-29T19:52:51Z")

</div>

Hey there @benoit and @CloudNStoyan !

> [@benoit](#):
>
> And my research points me to: yes indeed “child refresh tokens” get expired at the end of “parent refresh token” expiration lifetime. No matter what. Their expiration date does not get pushed in the future as you issue new “child tokens”.

That’s correct - All tokens within the same family will expire at the absolute expiration.

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/auth0/original/3X/b/5/b560f266932fcce5d57f09a6595bd50518cae3f3.jpeg) [@system](https://community.auth0.com/u/system)\
**Post date:** [April 12, 2024, 7:52pm UTC](https://community.auth0.com/t/does-a-refresh-tokens-family-that-is-in-a-rotation-expire-when-used-within-a-refresh-tokens-absolute-lifetime/128150/5 "2024-04-12T19:52:54Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.