Skip to main content
The First Step
August 29, 2019
Solved

Token generation limitation

We are able to generate Oauth access token from /restapi/oauth/token api.

We can see rate limit are applied.

Is there any limitation on number of access token generate by the Oauth server? If yes what is the number of access token it can generate?

PhongVu
PhongVuAnswer
Community Manager
August 29, 2019

There is a limit of active (valid) access tokens and it is 5 access tokens per user per app at the same time. This means that a user can logins to use the same app on 5 different computers. If he/she logins the same app on the 6th computer, one of the access token for the app on a computer he logged in earlier (most probably the first one) will be revoked.

2 replies

The First Step
August 29, 2019

There is no such limitation of token generation bu OAuth server.

There is only rate limit of applied to prevent unwanted attack on server.

x-rate-limit-limit →5 which means 5 OAuth Calls per min per extension .

There is no other limitation

PhongVu
Community Manager
PhongVuAnswer
Community Manager
August 29, 2019

There is a limit of active (valid) access tokens and it is 5 access tokens per user per app at the same time. This means that a user can logins to use the same app on 5 different computers. If he/she logins the same app on the 6th computer, one of the access token for the app on a computer he logged in earlier (most probably the first one) will be revoked.