Global limit has been reached

[dan.woda]

@mczotter

We have a very short-lived accessToken, ~3 minutes, that holds permission data from the user’s app_metadata. Administrators are able to change this information for many users at once, for example revoking permissions to certain resources via a bulk change.

I wonder if tweaking the access token lifetime would help to alleviate this issue. For example, if these bulk change requests typically take 5 minutes to complete, a token lifetime of 6-7 minutes could prevent a new token from needing to be requested for a bulk update, without compromising the short-lived security of the token.

@mczotter

I’ll try to create a simple code snippet that reproduces the problem and get back to you.

That would be great, thank you!