<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">Hi,<br>
<br>
when you send directAccess grant request it returns you
accessToken and refreshToken. Access token is valid for short
period of time (like 5 minutes as you mentioned) and you can then
refresh it with refreshToken for new tokens.<br>
<br>
When you're sending request from "client webservice" to "other
webservice", you can attach token into the request in HTTP header
like "Authorization: Bearer you-access-token-is-here" . Then
"other webservice" can be protected directly by our adapter and
specified as "bearer only" client, or you can use RSATokenVerifier
if you want to validate token manually in your application (in
case you use adapters, it will do it for you).<br>
<br>
See our demo example application for more details.<br>
<br>
Marek<br>
<br>
On 27.2.2015 21:47, Emil Posmyk wrote:<br>
</div>
<blockquote
cite="mid:CAGf0ewBSv0zJMjGU8rhcf0HCP+fjU=gkYCUtTKQKDJTo7eO_Ew@mail.gmail.com"
type="cite">
<div dir="ltr">
<div>
<div>
<div>Hello all<br>
<br>
</div>
I'm trying to validate downloaded earlier token (downloaded
via oauth application with direct access) and I found
RSATokenVerifier. It's working but this is only json
validation and it is not checking same token from user
session which exist in memmory.<br>
<br>
</div>
It is possible to use same token and check it with existing in
user session (without clustering) ? I want to use the same
token several times (for example same token for 5 minutes).
Token is sent from client webservice to other webservice and
last ws have to check token wchich is sent from first
webservice (must make sure that token is correct - the same).<br>
<br>
</div>
I have doubt becouse I saw that always when I try to
authenticate with direct access token is new but not over 5
minutes.<br>
<br>
<br clear="all">
<div>
<div>
<div>
<div>
<div>
<div>
<div class="gmail_signature">
<div><i><br>
regards</i></div>
<div><i>--</i></div>
<i>Emil Posmyk<br>
</i></div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
keycloak-user mailing list
<a class="moz-txt-link-abbreviated" href="mailto:keycloak-user@lists.jboss.org">keycloak-user@lists.jboss.org</a>
<a class="moz-txt-link-freetext" href="https://lists.jboss.org/mailman/listinfo/keycloak-user">https://lists.jboss.org/mailman/listinfo/keycloak-user</a></pre>
</blockquote>
<br>
</body>
</html>