search

meateam / OSpike

An OAuth2 authorization server supporting OpenID Connect
MIT License
2 stars 0 forks source link

Configurable token life-time and number #86

Closed yonatandt closed 4 years ago

yonatandt commented 4 years ago

A service-providers should be able to configure the token life-time and the number of allowed tokens in that frame of time by himself.

shakedmanes commented 4 years ago

By that way, each service-provider can use a very huge number of allowed tokens and token life-time range which will endanger the security of the service-provider, and therefore the clients which are using it.

If it will make your life easier, I can expand the token life-time for number of weeks.