How to restrict the refresh token OOTB web service to return same access token value till its expiry?

[Former Member]

We are following the OOTB access token and refresh token mechanism with the default expiry time of 12 hours and 30 days respectively. A new access token gets created on executing refresh token before expiry of the access token with the same refresh token value. We need to restrict this behavior and allow the refresh token web service to return new access token only after it has expired and it should return the existing access token till its expiry.

[former_member638635]

Hi Sneha, how did you solved this issue.Can you please describe it.

[Former Member]

Hi Rahul,

No, we came to an agreement with the mobile app vendor that the refresh token should be called once the access token is expired. As per OOTB, the refresh token web service will always refresh the token whenever requested and we are keeping that unchanged.

[former_member638635]

Thanks for update