Oauth 2 Access Token is not expiring

varun_kashyap

Hi Team,
I am using Jira's Oauth 2 (3LO) apps flow and refreshing the token before it expires.
So now I am able to use both the tokens new one that I have recently refreshed and the older one.
Both the tokens are valid to make API call.

Is this something expected?

Or anything else needs to be added.

Earl McCutcheon

Hello @varun_kashyap ,

Thanks for reaching out and I found some conflicting information on this one without a solid answer:

The following two threads discuss the exparity conditions of the access tokens that I recommend looking over as a starting point, one noting the refresh token should expire and another noting that it does not, which may just be an difference or bug in the token behavior from different time periods but I was not able to verify:

• https://community.developer.atlassian.com/t/jira-refresh-token-expiration/48346
• https://community.atlassian.com/t5/Jira-Software-questions/Jira-Cloud-Oauth-Expires-In/qaq-p/1181785

However, as noted in the second community thread above I recommend asking this question over on the developer community to get more details on this one:

please notice that this might not be the best place to get help on development  related questions. In case further help will be needed on this topic, you might want to ask the developers community instead, or open a ticket in the developers service desk:

• Developers Community: https://community.developer.atlassian.com/
• Developers Service Desk: https://ecosystem.atlassian.net/servicedesk/customer/portal/14

Regards,
Earl