Open hikalkan opened 3 years ago
Also, it would be better to equalize id token and access token life times.
Will the values be set to the defaults found in the IDentityServer docs? e.g.
SlidingRefreshTokenLifetime = (int)TimeSpan.FromDays(15).TotalSeconds,
AbsoluteRefreshTokenLifetime = (int)TimeSpan.FromDays(30).TotalSeconds,
AccessTokenLifetime = (int)TimeSpan.FromHours(1).TotalSeconds,
We've implemented refresh tokens with the v3.1. So, we can decrease access token lifetime. Current value is 1 year! 😄
We will do it for the startup template, anyone can do it now for their application, in the database (IdentityServerClients table) and in the data seed code.
Note: This can be a problem since refresh token was not implemented for other clients, like Blazor.