OAuth2.0-刷新令牌的最大请求数

Question

使用刷新令牌获得全新访问令牌的请求数量是否有上限？

Answer 1

Yes. 25 according to Google's developer documentation

Answer 2

Access tokens have a lifetime of 3600 seconds. Requesting a new access token before that time is up works fine but it's inefficient for your app to do so often. I don't think Google publishes a limit on how many non-expired access tokens a refresh token can have but you may get errors and it's non-optimal.

For most apps, refreshing an access token 10 minutes before the current access token expires (later if your not to worried about clock drift) works well.

Answer 3

The number of requests depend on the authorization server security policy. Some servers allow only one request (the refresh token is invalidate after the request), other servers may allow 10, 100 or even unlimited requests.