Never Expiring Refresh Tokens...

Answered

Follow

New post

A S

• June 16, 2021 17:38
• Edited

Is it possible to get a never-expiring Refresh Token (similar to how other Cloud Providers using OAuth work) for use in server-to-server implementations where no user would be there to authenticate the connection when needed? The 60 days limit for Refresh Token will not work in our scenario.

0

• Official comment

  

  Kourtney

  • June 21, 2021 14:20
  • Edited

  Hello, 

  We do not currently allow for never expiring tokens for security reasons. If you would like to see this feature added please ensure you submit your feedback to our product team at https://pulse.box.com/. Have you considered using one of our official Box SDKs which take care of token handling for you? 

  Best,

  Kourtney, Box Developer Advocate

  Comment actions Permalink
• 

  A S

  • June 21, 2021 16:29

  Hi Kourtney,

  Thanks for the response. I haven't looked into the SDK option which can take care of token handling. I will look into it and get back to you if I have any questions.

  0

  Comment actions Permalink

Please sign in to leave a comment.