Managing authorizations (issued tokens) granted for a client by a user

Technical information about Authlete APIs for managing authorizations (issued tokens) granted for a client by a user.

Updating issued token(s)

Technical information on different methods provided by Authlete for updating issued token(s) including scopes expiration time and other properties.

How Authlete determines token duration

Technical information on how Authlete determines token duration based on different versions like Authlete 1.x and Authlete 2.0.

Token duration per scope

Setting token duration individually per scope in Authlete 2.0 for more granular control and customization.

Token duration per client

Instructions on configuring access/refresh token duration per client in Authlete 2.1.

Changing token duration

Explanation on how changing token duration settings in Authlete affects access tokens and refresh tokens.

Authlete's policy on sweeping unused tokens

Authlete removes unused access tokens and refresh tokens after a certain period regardless of their expiration time set by the service owner console.

Token revocation policy

Technical Information about how Authlete handles token revocation requests and the corresponding invalidation of access tokens and refresh tokens.