Skip to main content
Solved

Refresh Token Expiry


neethujkp
Troubleshooter
Forum|alt.badge.img+10

What scope parameter value should we use for the Authorization Code endpoint to ensure that the refresh token never expires? Currently, we have set the scope to "signature extended," but the refresh token still expires after 30 days.

 

Best answer by Ivan.Dinkov

@neethujkp

In addition to what Michael said, to avail the “extended” scope you need to use the refresh token at least once in these 30 days in order to extend the expiry for another 30 days. If the refresh token is not used in 30 days it will still expire and you will need to go through the whole process of generating a new refresh and access token. 
The easiest way to think of this is that, if you specify the extended scope, every time a refresh token is used, its life will be extended by 30 days.

View Original
Is this content helpful?

3 replies

Michael.Rave
Docusign Employee
Forum|alt.badge.img+14
  • Docusign Employee
  • 929 replies
  • June 20, 2024

@neethujkp 

It is not possible so have a refresh token that never expires due to security reasons. The default value is 30 days as you correctly stated. With the “extended” scope, you can increase the value by additional 30 days.


Ivan.Dinkov
Docusign Employee
Forum|alt.badge.img+4
  • Docusign Employee
  • 36 replies
  • Answer
  • June 21, 2024

@neethujkp

In addition to what Michael said, to avail the “extended” scope you need to use the refresh token at least once in these 30 days in order to extend the expiry for another 30 days. If the refresh token is not used in 30 days it will still expire and you will need to go through the whole process of generating a new refresh and access token. 
The easiest way to think of this is that, if you specify the extended scope, every time a refresh token is used, its life will be extended by 30 days.


Forum|alt.badge.img+1
  • Newcomer
  • 3 replies
  • February 14, 2025

I have a nodejs application from where I would like to create a docusign envelope. Currently I use Authentication Code grant which provides the access token and refresh token manually. The refresh token gets expired every 30days when not in use. What other way can I take, such i dont need to everytime create a access token and manually login and then create a access token?