Open Closed

AppConsts: AccessTokenExpiration and RefreshTokenExpiration #6963

abarref created


I'm using the core and angular 7 template, and I'm wondering if the authentication system uses refresh tokens. I just saw that in AppConsts.cs there is AccessTokenExpiration and also RefreshTokenExpiration. Does changing RefreshTokenExpiration has any effects?


2 Answer(s)
  • 0
    aaron created

    ~~Yes, the authentication system uses refresh tokens.~~ The authentication system supports refresh tokens. However, calling the refresh token endpoint is only implemented for the Application.Client project, which is used by the Mobile projects.

    Yes, changing RefreshTokenExpiration has effects.

    Related: aspnetzero/aspnet-zero-core#2364

  • 0
    abarref created

    Thanks for the clarification aaron.