Question

Session lifespan

  • 14 November 2023
  • 1 reply
  • 33 views

Userlevel 1
Badge +4

Hello,
We are using IFS PSO Standalnoud and I would like to know how long can I use session token?
There is "InactiveSessionLogoutSeconds" parameter but when I tried to set it to 60 seconds, requested session token via API and waited for more than 1 minute. After this I called another API for session validation and I got result where session were still valid. Is this parameter for something else or am I missing something?

Follow up question... if tokens are expired only by their usage timeoute does it mean I can have unexpirable session token. If I use this token every minute just to change dataset time will this token sometime expiry?


1 reply

Userlevel 3
Badge +8

IFS will send cookies which can be used in the subsequent requests instead of the token. If you are building an app, you can keep that in mind and design the auth flow to use the cookies if they are present.

Bearer token expires in 3600 seconds (1h) by default. It can be extended with extend requests.

RFC 6750 - The OAuth 2.0 Authorization Framework: Bearer Token Usage (ietf.org)

Reply