This website uses Cookies. Click Accept to agree to our website's cookie use as described in our Privacy Policy. Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Log in to ask a question
Log in to ask a question

How long does it take to invalidate a revoked token

Posted on 07-10-2017 01:46 PM
Not applicable
Reply posted on --/--/---- --:-- AM

We have written a Revoke access token API that deals with revoking an access token and a refresh token. We're using OAuthV2 policy with 'InvalidateToken' operation and the cascade attribute is set to true. We've noticed that once a token is successfully revoked, it takes a few seconds before it is made unusable (sometimes up to ~ 7 seconds). Is that normal and expected? What would be the maximum time it'll take before the token is invalid?

0 1 320
Topic Labels
0 Likes
1 REPLY 1

Posted on --/--/---- --:-- AM
anilsr
Staff
Reply posted on --/--/---- --:-- AM

@Mike Smith , Great Question, It's expected due to cassandra replication factor. It depends on many factors. Max time depends on your DN's, Number of access tokens etc. @srinandans Anything you would like to add ?

0 Likes