Token Settings

The token related settings control access tokens as well as refresh tokens. These settings can be used to used to change the length of the token as well as their expiry time.

Token Length

The Token Length setting determines the size of both access tokens and refresh tokens.

To configure:

  • Navigate to the Configurations tab.

  • Under General Settings, locate the Token Length option. (The default length is set to 64).

    token-length-settings

Notes:

  • The value represents the maximum number of bytes used for the token.
  • The maximum supported length is 255 bytes as per OAuth standards. Tokens should not exceed 128 characters.(1 character = 2 bytes).

Token Expiry

The Token Expiry setting defines how long tokens remain valid before they expire.
To configure:

  • Go to the Configurations tab.
  • Under General Settings, locate the Token Expiry options.
    token-expiry-settings

Default Values

  • Access Token Expiry: 3600 seconds (1 hour)
  • Refresh Token Expiry: 1209600 seconds (14 days)

You can adjust these values based on your organization’s security requirements.Shorter expiry times improve security, while longer ones reduce the need for frequent reauthentication.