1. How many times can we use a Refresh token
0 Recommend
Posted Mar 22, 2018 10:39 AM
Hi Team,
Do we have any configuration for how many times can we use a refresh token.
I am using grant type = password.
I get a access token and refresh token ,I am using the refresh token to get a new access token .
I want to block the user if he uses the refresh token for more than 2 times.
2. Re: How many times can we use a Refresh token
0 Recommend
Posted Mar 22, 2018 06:27 PM
Then you may need to customize the token endpoint, maybe this could work -- add a quota assertion under the refresh token branch, using client_id as custom Counter ID.
3. Re: How many times can we use a Refresh token
0 Recommend
Posted Mar 22, 2018 10:50 PM
By default is it 1 time?
4. Re: How many times can we use a Refresh token
0 Recommend
Broadcom Employee
Posted Mar 22, 2018 11:43 PM
It depends... by default, each time you refresh token, it returns new access token and new refresh token.
If you're talking about old refresh token, it only available one time. But from client side, there is no limitation, you can always refresh as soon as the refresh token is not expired.
5. Re: How many times can we use a Refresh token
0 Recommend
Posted Mar 27, 2018 11:00 PM
Thanks
6. Re: How many times can we use a Refresh token
0 Recommend
Posted Mar 28, 2018 11:18 AM
I see the same refresh token generating all the time only access token is changing.
Can you please clarify?
