AbsoluteRefreshTokenLifetime

[jeffturbo]

IdentityServer version

7.1.0

.NET version

4.8.2

Description

Hi,
RefreshToken Lifetime is only 24 hours, and we want to make it available for 30 days.
We are using this parameter : AbsoluteRefreshTokenLifetime: 2592000 but apparently with no effect.
In the PersistedGrant Table, the expiration date of the RefreshToekn is ok (available for 1 month), but when we try to use it after 24 hours, the reference token is declared obsolete. Can you tell me what is wrong in our configuration ?

Reproduction steps

No response

Expected behavior

No response

Logs

No response

Additional context

No response

[RolandGuijt]

When you say reference token, do you mean the refresh token or is it the access token?

[jeffturbo]

I mean the refresh token. Best regards Jean-Francois

…

________________________________ De : RolandGuijt ***@***.***> Envoyé : jeudi, février 13, 2025 1:20:12 PM À : DuendeSoftware/community ***@***.***> Cc : Jean-François BAUDIN ***@***.***>; Author ***@***.***> Objet : Re: [DuendeSoftware/community] AbsoluteRefreshTokenLifetime (Discussion #43) Vous n’obtenez pas souvent d’e-mail à partir de ***@***.*** Pourquoi c’est important<https://aka.ms/LearnAboutSenderIdentification> When you say reference token, do you mean the refresh token or is it the access token? — Reply to this email directly, view it on GitHub<#43 (comment)>, or unsubscribe<https://github.com/notifications/unsubscribe-auth/BPOXPWTPBBKLT5BQY5I45PL2PSEXPAVCNFSM6AAAAABXBVWHP2VHI2DSMVQWIX3LMV43URDJONRXK43TNFXW4Q3PNVWWK3TUHMYTEMJYG4YTEMI>. You are receiving this because you authored the thread.Message ID: ***@***.***>

[RolandGuijt]

Do you have the CoordinateClientLifetimesWithUserSession option enabled by any chance?