Refresh token lifetime

[Francesca Ricci-Tam]

Hello Cerner experts,

in offline access, for what length of time is the refresh token valid?

Thank you,

Francesca Ricci-Tam

[Kol Kheang (Cerner)]

Hello Francesca,

You can find that information here: http://fhir.cerner.com/authorization/#utilizing-refresh-tokens

Thanks,

Kol

[Francesca Ricci-Tam]

It says that a refresh token can be used until a user or admin revokes it. So to confirm, it should be valid indefinitely (unless someone explicitly deletes it)?

--
You received this message because you are subscribed to a topic in the Google Groups "Cerner FHIR Developers" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/cerner-fhir-developers/Kxv4ryknfqE/unsubscribe.
To unsubscribe from this group and all its topics, send an email to cerner-fhir-devel...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/cerner-fhir-developers/a466aa43-bdec-463a-8cf6-cd1920952724n%40googlegroups.com.

[Kol Kheang (Cerner)]

That's correct. There is also another scenario where if the app hasn't been used in 3 months period, the refresh token will be invalid. The token can be revoked at anytime and the app should handle this expected behavior properly.