更新刷新令牌寿命 Azure AD B2C 用户流是否使当前刷新令牌过期

Question

I have a client with mobile apps that uses Azure AD B2C User flows for authentication.

There is a Policy for SignIn that has the Refresh token lifetime (days), this was set to low and we need to increase it.

If we change this policy setting, will it cause currently valid Refresh token's to expire or remain valid?

It is not listed as a reason in Token revocation

Answer 1

No, change the policy setting won't cause currently valid Refresh token's to expire.

The old refresh token will still be valid.

You can have a quick verification by using ROPC flow :

1. Acquire an access token/refresh token pair.

2. Change the Refresh token lifetime in ROPC user flow.

3. Use the refresh token above to acquire a new access token.