Level up your Box knowledge with brand new learning paths on Box University. Visit training.box.com to get started

Box Status

Rolling out a new client secret

Follow
New post
Outlook Box Integration

We need roll out a new client secret for a connected app. From developer portal, it seems I can simply reset the client secret. However, I wonder what will happen if a new client secret is issued. Will exiting access tokens be revoked? We may take a few days to deploy the new client secret. Is there any way to avoid service interruption?

Thanks,

Alex

0

Comments

3 comments

Date Votes
  • Alex Novotny

    You are correct. Once you reset - the older secret becomes invalid. However, the last token retrieved will still work until it expires (the refresh token will not)... 

    0
    Comment actions Permalink
  • Outlook Box Integration

    Thank you Alex! What is the lifetime for the access token? I am glad to know resetting app secret will not revoke existing access tokens. But if a token expired, it might not be renewed if new secret is not fully deployed in prod.

    0
    Comment actions Permalink
  • Alex Novotny

    https://developer.box.com/guides/authentication/tokens/

    Above describes the various tokens and their time expirations. 

    0
    Comment actions Permalink

Post is closed for comments.