I am following the explicit authentication path. I am not passing no_expiry as part of the scope.

After the final POST step, I receive back an expires value of 86399 (just shy of a full day).

It seems that my options are to either take this nearly full day or never expire the tokens. Is there a middle ground? I don't want to annoy my users by requiring them to re-authenticate daily but I'm also hesitant to request non-expiring tokens.


1 Answer 1


Yes, I always get 86399 too. And, no, you can't specify an interval other than no_expiry.

But you can call /access-tokens/{accessTokens}/invalidateDoc at whatever interval you wish.

So, for less user annoyance, set no_expiry but then call /invalidate every, say, 8 days, for example.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .