2

Is it ok to set access tokens to never expire? Or should we ask the user of the application to periodically re-enter their credentials?

Improve this question
2
  • That is all a matter of opinion. The responsible thing would be to to never use no_expiry so that the user and your app have a little more protection against exploits. The API takes care of reprompting the user as required.
    – Brock Adams
    Commented Mar 13, 2015 at 19:19
  • also off-topic - this question isn't specific to SE
    – JMP
    Commented Mar 21, 2015 at 5:02

0

Reset to default

Browse other questions tagged .