Oracle EPM OAuth 2.0 Working Mechanism of Refresh Token Grant type
Summary:
Currently Refresh token grant type allows multiple refresh tokens+ access token to coexist simultaneously. Though I understand this is the design will this change in future i.e. one refresh token can be live to get only 1 pair of refresh + access token and check if this access token is not used/expired and then only allow the related refresh token to fetch another pair of access token + refresh token as a cycle? to bring in more control, maintenance ease etc.
Device Code, JWT grant types both allows multiple refresh and access tokens to be alive at same time (FYI)
Tagged:
0