Skip to main content
Question

Session lifespan

  • November 14, 2023
  • 1 reply
  • 67 views

Forum|alt.badge.img+4

Hello,
We are using IFS PSO Standalnoud and I would like to know how long can I use session token?
There is "InactiveSessionLogoutSeconds" parameter but when I tried to set it to 60 seconds, requested session token via API and waited for more than 1 minute. After this I called another API for session validation and I got result where session were still valid. Is this parameter for something else or am I missing something?

Follow up question... if tokens are expired only by their usage timeoute does it mean I can have unexpirable session token. If I use this token every minute just to change dataset time will this token sometime expiry?

1 reply

DHCRADPA
Hero (Customer)
Forum|alt.badge.img+9
  • Hero (Customer)
  • 93 replies
  • November 14, 2023

IFS will send cookies which can be used in the subsequent requests instead of the token. If you are building an app, you can keep that in mind and design the auth flow to use the cookies if they are present.

Bearer token expires in 3600 seconds (1h) by default. It can be extended with extend requests.

RFC 6750 - The OAuth 2.0 Authorization Framework: Bearer Token Usage (ietf.org)


Reply


Cookie policy

We use cookies to enhance and personalize your experience. If you accept you agree to our full cookie policy. Learn more about our cookies.

 
Cookie settings