We have an OIDC callback that receives the code via a query param. We then call the Auth0 oauth/token API to exchange the code for tokens. I can see that the code appears to be a single-use code. The second call to the token endpoint with the same code gives an error. But if I don’t use the code a…

Hi @djones , Welcome to the Auth0 Community Forum! I can’t find a specific time, but according to the spec : The authorization code generated by the authorization server. The authorization code MUST expire shortly after it is issued to mitigate the risk of leaks. A maximum authorization code …

How long is a code valid for exchanging with tokens?

Get Help

dan.woda Closed October 3, 2019, 6:10am 4

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
Access token minimum expiration time Get Help access-token	2	6868	August 2, 2019
Token expiry stuck at 7200 seconds Get Help id_token , access_token , expire	7	8941	September 17, 2018
Access token from /oauth/token becomes invalid Get Help	9	2972	July 2, 2022
JWT expiration 2 hours regardless of ID Token Expiration setting Get Help jwt , expiration	8	6582	August 7, 2020
Seemingly able to renew access_token with expired id_token Get Help id_token , access-token , expiration	7	6598	July 25, 2019

How long is a code valid for exchanging with tokens?

Related topics