为什么刷新令牌会在 14 天后过期 [英] Why do refresh tokens expire after 14 days

问题描述

每个刷新令牌的有效期为 14 天.为什么刷新令牌会过期?

Each refresh token is valid for 14 days. Why do the refresh tokens expire?

推荐答案

14 天基于被认为是实施 OAuth2 的最佳实践.请参阅 为什么访问令牌会过期? 以获取有关 OAuth2 为什么刷新的非常全面的答案令牌过期.

14 days was based on what is considered best practice in implementing OAuth2. See Why do access tokens expire? for a pretty comprehensive answer about why OAuth2 refresh tokens expire.

我们有兴趣了解大于 14 的哪个数字适合您的应用程序.我们根据初始反馈、应用程序开发人员的调查以及用户的应用程序登录情况选择了 14 天.绝大多数用户比每 14 天更频繁地登录应用程序.

We are interested in hearing what number bigger than 14 would work for your application. We picked 14 days based on initial feedback, surveys from application developers, as well as looking at application logins by users. A high majority of users login with apps more often than every 14 days.

你能解释一下你的用例吗?什么是理想的非无限刷新间隔，可以让您在安全性和便利性之间取得平衡

Can you explain your use case? What would be the ideal non-infinite refresh-interval that would give you a balance between peace-of-mind about security, and convenience

这篇关于为什么刷新令牌会在 14 天后过期的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！