# \#expire

**URL:** https://community.auth0.com/tag/expire/387.md

[Latest](https://community.auth0.com/latest.md) · [Categories](https://community.auth0.com/categories.md) · [Tags](https://community.auth0.com/tags.md)

---

## [Session lifetime expiration not working](https://community.auth0.com/t/session-lifetime-expiration-not-working/90002)

<div class="topic-metadata">

**Author:** [@jason.Lee](https://community.auth0.com/u/jason.Lee)\
**Replies:** 1\
**Last updated:** [September 22, 2022, 11:33pm UTC](https://community.auth0.com/t/session-lifetime-expiration-not-working/90002 "2022-09-22T23:33:22Z")

</div>

We need auth0 authentication session expiration. We implemented login and authentication to the application using auth0. (our application is react spa app) For example, you want to ensure that the session of the logged…

---

## [How do I properly handle session timeout in PKCE using the Vue Auth0 SDK?](https://community.auth0.com/t/how-do-i-properly-handle-session-timeout-in-pkce-using-the-vue-auth0-sdk/89861)

<div class="topic-metadata">

**Author:** [@jgleason](https://community.auth0.com/u/jgleason)\
**Replies:** 1\
**Last updated:** [September 1, 2022, 8:00pm UTC](https://community.auth0.com/t/how-do-i-properly-handle-session-timeout-in-pkce-using-the-vue-auth0-sdk/89861 "2022-09-01T20:00:32Z")

</div>

Hey everyone, Business is asking to make sure people have to go through the auth flow every n hours. My login config looks like this… { domain: "...", client\_id: "...", redirect\_uri: window.location.o…

---

## [Fingerprint to expire Refresh tokens](https://community.auth0.com/t/fingerprint-to-expire-refresh-tokens/7627)

<div class="topic-metadata">

**Author:** [@nicolo.zanetti](https://community.auth0.com/u/nicolo.zanetti)\
**Replies:** 1\
**Last updated:** [August 3, 2017, 9:14pm UTC](https://community.auth0.com/t/fingerprint-to-expire-refresh-tokens/7627 "2017-08-03T21:14:45Z")

</div>

Would it be a good idea to use a form of device fingerprint to detect that the token might being used by a different device that one initially used to generate it and therefore the token revoked? I’m not saying to use t…
