search

appsmithorg / appsmith

Platform to build admin panels, internal tools, and dashboards. Integrates with 25+ databases and any API.
https://www.appsmith.com
Apache License 2.0
33.76k stars 3.63k forks source link

Support refresh token rotation for OIDC protocol #21684

Open infinitetrooper opened 1 year ago

infinitetrooper commented 1 year ago

Enabling refresh token rotation means every time an application exchanges a refresh token to get a new access token, a new refresh token is also returned. Therefore, you no longer have a long-lived refresh token that, if compromised, could provide illegitimate access to resources. As refresh tokens are continually exchanged and invalidated, the threat is reduced.

More information here

Slack Conversation here

Front logo Front conversations

infinitetrooper commented 1 year ago

Another request from yogananda-srf.org