From 229db038ea2fcfed1f18abbeba8d882a7d01b6ed Mon Sep 17 00:00:00 2001 From: rishabhpoddar Date: Mon, 28 Oct 2024 22:40:04 +0530 Subject: [PATCH] small changes --- v2/unified-login/multiple-frontends-with-a-single-backend.mdx | 3 +-- v2/unified-login/multiple-frontends-with-separate-backends.mdx | 3 +-- 2 files changed, 2 insertions(+), 4 deletions(-) diff --git a/v2/unified-login/multiple-frontends-with-a-single-backend.mdx b/v2/unified-login/multiple-frontends-with-a-single-backend.mdx index 1ad0698bd..abec83222 100644 --- a/v2/unified-login/multiple-frontends-with-a-single-backend.mdx +++ b/v2/unified-login/multiple-frontends-with-a-single-backend.mdx @@ -155,8 +155,7 @@ There are no limits on the duration of each token. ### Disable Refresh Token Rotation -By default, the **OAuth2 Refresh Token** wil expire after 30 days. -If your use case cannot accomodate the process of changing the [**OAuth2 Refresh Token**](/docs/unified-login/introduction#oauth2-refresh-token) for a new one, you can make it so that this behavior does not apply for your implementation. +By default, a refresh token is one time use. This means, once a refresh token is used to get a new access token, it cannot be used again. If your use case cannot accomodate the process of changing the [**OAuth2 Refresh Token**](/docs/unified-login/introduction#oauth2-refresh-token) for a new one, you can make it so that this behavior does not apply for your implementation. In order to achieve this behavior just set the `enableRefreshTokenRotation` property to `false` in the [**Client**](/docs/unified-login/introduction#client) creation request body. diff --git a/v2/unified-login/multiple-frontends-with-separate-backends.mdx b/v2/unified-login/multiple-frontends-with-separate-backends.mdx index 5b36c029e..e247335cf 100644 --- a/v2/unified-login/multiple-frontends-with-separate-backends.mdx +++ b/v2/unified-login/multiple-frontends-with-separate-backends.mdx @@ -161,8 +161,7 @@ There are no limits on the duration of each token. ### Disable Refresh Token Rotation -By default, the **OAuth2 Refresh Token** wil expire after 30 days. -If your use case cannot accomodate the process of changing the [**OAuth2 Refresh Token**](/docs/unified-login/introduction#oauth2-refresh-token) for a new one, you can make it so that this behavior does not apply for your implementation. +By default, a refresh token is one time use. This means, once a refresh token is used to get a new access token, it cannot be used again. If your use case cannot accomodate the process of changing the [**OAuth2 Refresh Token**](/docs/unified-login/introduction#oauth2-refresh-token) for a new one, you can make it so that this behavior does not apply for your implementation. In order to achieve this behavior just set the `enableRefreshTokenRotation` property to `false` in the [**Client**](/docs/unified-login/introduction#client) creation request body.