简体   繁体   English

Spring OAuth2 刷新令牌过期

[英]Spring OAuth2 Refresh token expiration

I am wondering if my refresh token validity <property name="refreshTokenValiditySeconds" value="6000" /> expires, does spring automatically removes it from DB calling TokenStore method void removeRefreshToken(OAuth2RefreshToken var1);我想知道我的刷新令牌有效性<property name="refreshTokenValiditySeconds" value="6000" />过期,spring 是否会自动从 DB 调用TokenStore方法void removeRefreshToken(OAuth2RefreshToken var1); Or it is handled differently after expiration ?或者到期后处理方式不同?

Spring does not expire the refresh token automatically.过期令牌自动刷新。 Your TokenStore implementation has to take care of that.您的 TokenStore 实现必须照顾到这一点。 For example a Redis backed token store can expire token key-value pairs autonomously if the key expiry is is set.例如,如果设置了密钥过期,Redis 支持的令牌存储可以自动使令牌键值对过期。

removeRefreshToken(..) is for explicitly removing stored refresh tokens. removeRefreshToken(..)用于显式删除存储的刷新令牌。

声明:本站的技术帖子网页,遵循CC BY-SA 4.0协议,如果您需要转载,请注明本站网址或者原文地址。任何问题请咨询:yoyou2525@163.com.

 
粤ICP备18138465号  © 2020-2024 STACKOOM.COM