[Hawkular-dev] Keycloak Authorization Tokens

Artur Dryomov artur.dryomov at gmail.com
Tue Aug 18 05:21:18 EDT 2015


Thank you for the answers.

No. Even if the refresh token is configured to not expire, it will expire
> should the user perform a logout. In other words: every refresh token needs
> an active user session, otherwise it's understood that it has expired.


Is it possible to configure the session length to a longer period by
default then? 30 minutes seems very little and, as I’ve mentioned, will be
(very) frustrating for users.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.jboss.org/pipermail/hawkular-dev/attachments/20150818/aafdf963/attachment.html 


More information about the hawkular-dev mailing list