Thema "Re: Lifetime of the RefreshToken and needed procedure to renew it" in Feedback API

Lifetime of the RefreshToken and needed procedure to renew it

JueBag — Fri, 24 Dec 2021 12:56:02 GMT

As noticed lately the RefreshToken doesn't live forever.

Such requirement is ( somewhat) understood, however is it really necessary to urge the users the redo the whole authentification process again?

Re: Lifetime of the RefreshToken and needed procedure to renew it

CustomerCareMichael — Thu, 06 Jan 2022 12:22:41 GMT

Hi @JueBag ,

Thanks for the feedback. That the refresh token is expiring after 180 days is a mechanism to keep the API more secure.

I also understand the additional effort of users to create a new refresh token. We will evaluate the possibilities to extend the refresh token TTL or having a refresh token that does not expire.

In the meantime, do you already have an implementatoin that accounts for creating a new refresh token after 180 days?

Regards,

Michael

Re: Lifetime of the RefreshToken and needed procedure to renew it

JueBag — Thu, 06 Jan 2022 14:00:23 GMT

Thanks for the feedback.

No, I don't have an own solution for the needed update of the RefreshToken yet.

AFAIK user @rogrun wi implement this in his openHAB binding (i.e. a complete and ready to use interface), once complete I will move over to this solution.