Clarification Request - Refresh Token Expiry for non-spa clients about entra-docs HOT 6 CLOSED

Hey @seanke - that's correct. For non-SPA scenarios, the refresh token granted will have a fresh expiry (i.e., expiry is not carried over), thus enabling you to renew indefinitely while the refresh token is valid. Just remember to follow best practices surrounding refresh tokens (i.e., secure storage, delete old refresh tokens once you've obtained a new one). Also, there are a variety of scenarios where the refresh token can be revoked by the server if certain actions are performed (i.e., password reset) - a full list can be found at the bottom of the refresh token article you linked here.

Let me know if this helps answer your question - if so, I'll go ahead and close the issue. Thanks!

from entra-docs.

Awesome, thank you so much. That answers my question perfectly.

from entra-docs.

@fadnavistanmay
Thanks for your feedback! We will investigate and update as appropriate.

from entra-docs.

@seanke
Thanks for bringing this to our attention.
I'm going to assign this to the document author so they can take a look at it accordingly.

@cilwerner
please review it.

from entra-docs.

No worries! Going to close the thread now (assuming my permissions work)

from entra-docs.

#please-close

from entra-docs.