osTicket / osTicket-plugins

Core plugins for osTicket (v1.8+)
GNU General Public License v2.0
148 stars 162 forks source link

auth-oauth2: Update Refresh Token #264

Closed protich closed 1 year ago

protich commented 1 year ago

This PR addresses an issue where Refresh Token expires after 90 days for users using Office 365 as the OAuth2 provider.

It turns out Microsoft (Office 365) issues a new Refresh Token everytime Access Token is refreshed [1], otherwise the original Refresh Token expires after 90 days from the time it was issued.

[1] - https://learn.microsoft.com/en-us/azure/active-directory/develop/refresh-tokens