2

Is it ok to set access tokens to never expire? Or should we ask the user of the application to periodically re-enter their credentials?

Improve this question
2
  • That is all a matter of opinion. The responsible thing would be to to never use no_expiry so that the user and your app have a little more protection against exploits. The API takes care of reprompting the user as required. Commented Mar 13, 2015 at 19:19
  • also off-topic - this question isn't specific to SE Commented Mar 21, 2015 at 5:02

0

Reset to default

Start asking to get answers

Find the answer to your question by asking.

Ask question

Explore related questions

See similar questions with these tags.