OneLogin OIDC native application with PKCE refresh token expiry

0
votes

When using OneLogin OpenID Connect, for a native application with PKCE, how do I set the refresh token expiry?

What is the default refresh token expiry?

Can I have an application on OneLogin that does not issue a refresh token?

From the documentation, it looks like I can only control the refresh token expiry when using a password grant.

https://developers.onelogin.com/openid-connect/api/refresh-session

1
openid-connectoneloginrefresh-token

1 Answers

1
votes

That's correct. Onelogin only supports admin control of the token validity lengths for the Password Grant flow. I have no idea why that is the case. No other OAuth2 Authz server I've come across has that limitation.