Rolling out a new client secret

New post

Comments

3 comments

  • Alex Novotny

    You are correct. Once you reset - the older secret becomes invalid. However, the last token retrieved will still work until it expires (the refresh token will not)... 

    0
    Comment actions Permalink
  • Outlook Box Integration

    Thank you Alex! What is the lifetime for the access token? I am glad to know resetting app secret will not revoke existing access tokens. But if a token expired, it might not be renewed if new secret is not fully deployed in prod.

    0
    Comment actions Permalink
  • Alex Novotny

    https://developer.box.com/guides/authentication/tokens/

    Above describes the various tokens and their time expirations. 

    0
    Comment actions Permalink

Please sign in to leave a comment.