Create
cancel
Showing results for 
Search instead for 
Did you mean: 
Sign up Log in

Is there a limit for Oauth refresh token that a client can have?

masterall May 4, 2017

From Bitbucket's Oauth doc, an access code can be get from https://bitbucket.org/site/oauth2/authorize?client_id={client_id}&response_type=code, and a fresh token can be get from curl -X POST -u "client_id:secret" https://bitbucket.org/site/oauth2/access_token -d grant_type=authorization_code -d code={code}. If we call these two methods repeatedly, how many valid refresh token can we get? Will the first refresh token become invalid if the number of calls made exceeds the limit?

I did some tests for it, and found the refresh tokens got were the same for the same client. Because I don't find any document states the refresh token is constant for a specific client, could you confirm if it is true or not?

Thanks!

0 answers

Suggest an answer

Log in or Sign up to answer
TAGS
AUG Leaders

Atlassian Community Events