feat: ensure OAuth2 refresh tokens outlive access tokens (#19769)

2026-09-24 15:04:27 +08:00 · 2025-09-13 08:57:26 +02:00
parent be7aa58075
commit 088d14933c
15 changed files with 229 additions and 17 deletions
@@ -14945,6 +14945,10 @@
 				},
 				"max_token_lifetime": {
 					"type": "integer"
+				},
+				"refresh_default_duration": {
+					"description": "RefreshDefaultDuration is the default lifetime for OAuth2 refresh tokens.\nThis should generally be longer than access token lifetimes to allow\nrefreshing after access token expiry.",
+					"type": "integer"
 				}
 			}
 		},