From 6cd9ed7b4806c52a74d20670c2453d96210f886a Mon Sep 17 00:00:00 2001 From: Roland Guijt Date: Fri, 27 Sep 2024 11:23:59 +0200 Subject: [PATCH 1/2] Describe absoluterefreshtokenlifetime set to 0 --- IdentityServer/v7/docs/content/reference/models/client.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/IdentityServer/v7/docs/content/reference/models/client.md b/IdentityServer/v7/docs/content/reference/models/client.md index f85bfc71..b22e1958 100644 --- a/IdentityServer/v7/docs/content/reference/models/client.md +++ b/IdentityServer/v7/docs/content/reference/models/client.md @@ -205,16 +205,16 @@ public static IEnumerable Get() * ***AbsoluteRefreshTokenLifetime*** - Maximum lifetime of a refresh token in seconds. Defaults to 2592000 seconds / 30 days + Maximum lifetime of a refresh token in seconds. Defaults to 2592000 seconds / 30 days. Zero allows refresh tokens that, when used with RefreshTokenExpiration = Sliding only expire after the SlidingRefreshTokenLifetime is passed. * ***SlidingRefreshTokenLifetime*** - Sliding lifetime of a refresh token in seconds. Defaults to 1296000 seconds / 15 days + Sliding lifetime of a refresh token in seconds. Defaults to 1296000 seconds / 15 days. * ***RefreshTokenUsage*** * ***ReUse*** - the refresh token handle will stay the same when refreshing tokens + the refresh token handle will stay the same when refreshing tokens. * ***OneTimeOnly*** From 90d4e8e4c387d6ea6aa13b1c1119860f8c41a98f Mon Sep 17 00:00:00 2001 From: Roland Guijt Date: Tue, 1 Oct 2024 20:05:50 +0200 Subject: [PATCH 2/2] Add absolute refreshtokenexpiration scenario --- IdentityServer/v7/docs/content/reference/models/client.md | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/IdentityServer/v7/docs/content/reference/models/client.md b/IdentityServer/v7/docs/content/reference/models/client.md index b22e1958..5c7a1dea 100644 --- a/IdentityServer/v7/docs/content/reference/models/client.md +++ b/IdentityServer/v7/docs/content/reference/models/client.md @@ -205,7 +205,13 @@ public static IEnumerable Get() * ***AbsoluteRefreshTokenLifetime*** - Maximum lifetime of a refresh token in seconds. Defaults to 2592000 seconds / 30 days. Zero allows refresh tokens that, when used with RefreshTokenExpiration = Sliding only expire after the SlidingRefreshTokenLifetime is passed. + Maximum lifetime of a refresh token in seconds. Defaults to 2592000 seconds / 30 days. + + Setting this to 0 has the following effect: + + - When *RefreshTokenExpiration* is set to *Absolute*, the behavior is the same as when no refresh tokens are used. + - When *RefreshTokenExpiration* is set to *Sliding*, refresh tokens only expire after the *SlidingRefreshTokenLifetime* has passed. + * ***SlidingRefreshTokenLifetime***