Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

By default RT’s expire after 30 minutes of inactivity, while the session can be kept alive for 10 hours by exchanging tokens at leas least every 30 minutes, thereby getting a new RT.

It is highly recommended that the application always uses the RT from the latest exchange, as this will be valid the longest. The validity of old RT’s can not be guarantied, as the AS, at some point in the future, may be configured to revoke RT’s after a certain number of uses.

...