Question

Long lived tokens

  • 24 August 2016
  • 3 replies
  • 3552 views

When using the authorization flow is there a way to increase the refresh token TTL to be more than a week?


I have seen with other OAuth implementations that the refresh token TTL is refreshed or increased every time the access token is used.


The advantage of this is that a regular user of the api will not need to re-authorise weekly


Thanks,








3 replies

AFAIK, 7 days is the maximum amount of time which can be set for a refresh token (and becomes the default value if the specified value is greater than this maximum).
The advantage of this is that a regular user of the api will not need to re-authorise weekly

Our SDKs automatically manage token refresh for you so if you are using the API regularly (at least once a week), you should not notice any need to manually re-authorize.

This page has a link to our SDKs:

https://developers.ringcentral.com/library/sdks.html

Some questions:

  1. How often is your app making API calls? Is it at least once a week?
  2. Are you using one of our SDKs and if so which one?

refresh_token have a life of 1 week and after that it expires. You can refresh a new set of accees_token and refresh_token to use. I have seen these as a more or less same duration as a common practice around different oauth servers. Why do you need a refresh_token more than that life ? You can always generates a new access token and refresh token before it expire.

A Refresh Token is a special kind of token that can be used to obtain a renewed access token

Reply