# New access token with every call to getAccessTokenSilently() **URL:** \ **Category:** Get Help\ **Tags:** api, react, access-token\ **Created:** [September 23, 2022, 9:25am UTC](https://community.auth0.com/t/new-access-token-with-every-call-to-getaccesstokensilently/91189 "2022-09-23T09:25:40Z")\ **Posts on this page:** 4\ **Page:** 1
**Author:** ![pi1](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/pi1/32/40202_2.png) [@pi1](https://community.auth0.com/u/pi1)\ **Post date:** [September 23, 2022, 9:25am UTC](https://community.auth0.com/t/new-access-token-with-every-call-to-getaccesstokensilently/91189/1 "2022-09-23T09:25:40Z")
I’m writing a SPA using `auth0-react` 1.11. Either I’m doing something wrong or there is an issue with token caching. It feels like I’m following all recommended practices. I call `getAccessTokenSilently` before every call to our API that expects a valid accessToken. And for every single endpoint there’s a new token that it retrieves from `/authorize`. If I decode the tokens the only difference is that the timestamps have changed. We are setting an `audience` but it’s centrally set in the `Auth0Provider` and never changes. Of course `ignoreCache` is not on. Changing the storage between `memory` and `localStorage` has no effect. Changing browser or moving over to refresh tokens has no effect. Is this a side-effect of setting the audience in `Auth0Provider`? What can I do to reduce the number of calls to your servers (in order to have better access times and prevent throttling on your end)? ---
**Author:** ![jmangelo](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/jmangelo/32/7923_2.png) [@jmangelo](https://community.auth0.com/u/jmangelo)\ **Post date:** [September 27, 2022, 11:40am UTC](https://community.auth0.com/t/new-access-token-with-every-call-to-getaccesstokensilently/91189/2 "2022-09-27T11:40:08Z")
That is indeed a weird situation; the likely most definitive action to find the root cause would be to debug step by step and try to see if you can get any hints as to why the SDK code is choosing to obtain a new token. The `getAccessTokenSilently ` in that SDK should be mostly a wrapper for `getTokenSilently` in the Auth0 SPA JS SDK ([https://github.com/auth0/auth0-spa-js/blob/842e132bec718867026c99c76a27f810083258d6/src/Auth0Client.ts#L870](https://github.com/auth0/auth0-spa-js/blob/842e132bec718867026c99c76a27f810083258d6/src/Auth0Client.ts#L870)). From a quick look, it seems scopes could also be relevant in this situation. Another quick check is to configure to use Web Storage for caching and then manually check that after obtaining an access token you do see it in local storage using the browser dev tools. ---
**Author:** ![pi1](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/pi1/32/40202_2.png) [@pi1](https://community.auth0.com/u/pi1)\ **Post date:** [September 27, 2022, 12:58pm UTC](https://community.auth0.com/t/new-access-token-with-every-call-to-getaccesstokensilently/91189/3 "2022-09-27T12:58:00Z")
Thank you so much for these pointers. I stored the tokens in localStorage for debugging and compared the timestamps. While the access token itself was not to be expire for the set amount of time, it was encapsulated in what looks like an `id_token` that was set to expire after a very short amount of time (because that was mentioned as a workaround for Safari’s ITP technology). So the `expires` value was always correct but the `expiresAt` that is stored with the caching but not encoded into the token asked for a fresh cache entry which triggered requesting a fresh token. For future reference: if anyone runs into the same problem make sure that your ID Token Expiration is set to a reasonable value. It’s set per application not per API. ---
**Author:** ![system](https://global.discourse-cdn.com/auth0/original/3X/b/5/b560f266932fcce5d57f09a6595bd50518cae3f3.jpeg) [@system](https://community.auth0.com/u/system)\ **Post date:** [October 11, 2022, 12:58pm UTC](https://community.auth0.com/t/new-access-token-with-every-call-to-getaccesstokensilently/91189/4 "2022-10-11T12:58:30Z")
This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.