Refresh Token Expiry

Forum|Forum|2 years ago
June 20, 2024
3 replies
1094 views

What scope parameter value should we use for the Authorization Code endpoint to ensure that the refresh token never expires? Currently, we have set the scope to "signature extended," but the refresh token still expires after 30 days.

Best answer by Ivan.Dinkov

@neethujkp

In addition to what Michael said, to avail the “extended” scope you need to use the refresh token at least once in these 30 days in order to extend the expiry for another 30 days. If the refresh token is not used in 30 days it will still expire and you will need to go through the whole process of generating a new refresh and access token.
The easiest way to think of this is that, if you specify the extended scope, every time a refresh token is used, its life will be extended by 30 days.

Michael.Rave

Docusign Employee

@neethujkp

It is not possible so have a refresh token that never expires due to security reasons. The default value is 30 days as you correctly stated. With the “extended” scope, you can increase the value by additional 30 days.

"Select as Best" below if you find my answer is a valid solution to your issue and mark it as resolved.

Ivan.Dinkov

Answer

Docusign Employee

@neethujkp

In addition to what Michael said, to avail the “extended” scope you need to use the refresh token at least once in these 30 days in order to extend the expiry for another 30 days. If the refresh token is not used in 30 days it will still expire and you will need to go through the whole process of generating a new refresh and access token.
The easiest way to think of this is that, if you specify the extended scope, every time a refresh token is used, its life will be extended by 30 days.

Ivan D

A

anupk11

New Voice

I have a nodejs application from where I would like to create a docusign envelope. Currently I use Authentication Code grant which provides the access token and refresh token manually. The refresh token gets expired every 30days when not in use. What other way can I take, such i dont need to everytime create a access token and manually login and then create a access token?

Sign up

You can login or register as either a Docusign customer or developer. If you don’t already have a Docusign customer or developer account, you can create one for free when registering.

Docusign Community

You can login or register as either a Docusign customer or developer. If you don’t already have a Docusign customer or developer account, you can create one for free when registering.