Hello!! I’m Ken, the native iOS app engineer. We are using refresh tokens to obtain access tokens with Auth0. We want to change the refresh token setting from a method using “Absolute Lifetime and Inactivity Lifetime” to a method using “only Inactivity Lifetime”: Before: ・Refresh Token Rotation …

Hi @kenichi.sugiyama.re Disabling refresh token rotation is NOT recommended. This is for security. If a refresh token is somehow leaked and used, the refresh token rotation will prevent additional compromise. If you turn off refresh token rotation, and an attacker gets a refresh token, they have a …

When does a refresh token become invalid?

Get Help

tyf Closed July 12, 2022, 8:47am 5

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
Refresh token expiry cases Get Help refresh-tokens , refresh-token-rotate	3	3617	November 25, 2021
How long is the Refresh token valid if the rotation is not set Get Help sessions , reusable-refresh-tokens	2	27	August 19, 2024
Clarifying Refresh Token Rotation in Auth0 Knowledge Articles refresh-tokens , refresh-token-rotate	1	292	September 12, 2024
Handling Expired Refresh Tokens Knowledge Articles	1	57	March 3, 2025
Refresh Token Absolute Expiration Clarification Needed Get Help login-experience , new-universal-login-experience	2	1349	May 29, 2023

When does a refresh token become invalid?

Related topics