<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">On 12/02/16 18:10, robinfernandes .
wrote:<br>
</div>
<blockquote
cite="mid:CAFOTW4ZPEnuM-=hOP7rHA5e3VGajdJEF975cwgBq_LYRzyfo2g@mail.gmail.com"
type="cite">
<div dir="ltr">Hi Everyone,<br>
<br>
So the scenario that I am trying to understand is as follows:<br>
<br>
1. I get an offline token and I try to refresh my token pair
(access,refresh) using this offline token. <br>
2. Will I get a new offline token? Or will Keycloak see that you
passed in an offline token so it will return the same offline
token back?<br>
<br>
The tests that I performed I saw it returning a new offline
token each time. Is that a correct understanding?</div>
</blockquote>
Yes, it works this way. However if you have some DAO on your
application side, you don't need to save new offline token every
time. You can still use the old offline token for refreshing and it
will work. There is no any expiration on offline token itself, there
is just expiration on keycloak-server side, which is updated during
each token refresh (In other words, as long as you refresh at least
once every 30 days, you can use same offline token for a years).<br>
<br>
The only exception of this is, if you have "Revoke refresh token"
switch enabled for your realm. Then each offline token can be used
just once, so you need to always use newest offline token.<br>
<br>
Marek<br>
<br>
<blockquote
cite="mid:CAFOTW4ZPEnuM-=hOP7rHA5e3VGajdJEF975cwgBq_LYRzyfo2g@mail.gmail.com"
type="cite">
<div dir="ltr">
<div>Is there any parameter I can pass to the token refresh call
so that it gives me the same offline token back? <br>
<br>
Thanks,<br>
Robin</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
keycloak-user mailing list
<a class="moz-txt-link-abbreviated" href="mailto:keycloak-user@lists.jboss.org">keycloak-user@lists.jboss.org</a>
<a class="moz-txt-link-freetext" href="https://lists.jboss.org/mailman/listinfo/keycloak-user">https://lists.jboss.org/mailman/listinfo/keycloak-user</a></pre>
</blockquote>
<br>
</body>
</html>