Forum Discussion
Marvin
Cirrocumulus
CirrocumulusF5 oauth server refresh token revocation
Dear All, I am working on a F5 as the oauth server provider which provides JWT access tokens for oauth clients, everything works fine but now we want to know how to revoke the access / refresh ...
MarvinCirrocumulus
Cirrocumulus- For JWT Access Token Lifetime, type a number.
- This specifies the number of minutes a JWT access token is considered valid. In specifying this lifetime, consider that JWT access tokens cannot be revoked.
- For JWT Generate Refresh Token, select Enabled so the OAuth authorization server generates a refresh token in addition to the access token for authorization code and resource owner credential grants.
- For JWT Refresh Token Lifetime, type a number.
- This specifies the number of minutes a refresh token is considered valid. In specifying this lifetime, consider that JWT refresh tokens cannot be revoked.