Repository navigation
Remember Me does not store Refresh token #34197
Unanswered
Walnussbaer
asked this question in
Q&A
Replies: 1 comment
|
Now I know why this happens. Now I wonder: is it a good idea to store the refresh token in the browser via custom logic? |
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
Uh oh!
There was an error while loading. Please reload this page.
When using the
Remember Mefunction, the refresh token seems to be updated after a browser restart.Is that intended behaviour?
I want to use the
Remember Mefunction together with anoffline_accessscope. The user logs in with theoffline_accessscope.The refresh token then has no expiry time.
When the user closes the browser and opens it again, the session is remembered. But the refresh token then has an expiration time, it looks like this is taken from
SSO Session Idle. Why is the original refresh token not persisted?All reactions