Automatic token refresh with elytron-oidc-client

17 views
Skip to first unread message

Dalibor Kalna

unread,
Oct 10, 2025, 2:21:27 AM (9 days ago) Oct 10
to WildFly
Hi there

I have one question regarding elytron-oidc-client:

Does elytron-oidc-client take care of refreshing token when it expires if I specified token-timeout in configuration? I do not want to use 
always-refresh-token config, beacuse that would lead to unnecessary traffic. Thank you and best regards Dalibor

<subsystem xmlns="urn:wildfly:elytron-oidc-client:2.0">
<provider name="test-provider">
<provider-url>https://someurl.com/sso/auth/realms/test-realm</provider-url>
<principal-attribute>preferred_username</principal-attribute>
<autodetect-bearer-only>true</autodetect-bearer-only>
</provider>
<secure-deployment name="test-web.war">
<provider>test-provider</provider>
<bearer-only>true</bearer-only>
<client-id>test-client-id</client-id>
<credential name="secret" secret="test" token-timeout="60000"/>
</secure-deployment>
</subsystem>

Rebecca Searls

unread,
Oct 10, 2025, 8:28:02 AM (8 days ago) Oct 10
to Dalibor Kalna, WildFly
As I read the documentation elytron will not automatically refresh the token.

--
You received this message because you are subscribed to the Google Groups "WildFly" group.
To unsubscribe from this group and stop receiving emails from it, send an email to wildfly+u...@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/wildfly/d500a53c-8a20-4c0c-8d67-8467fffc5409n%40googlegroups.com.
Reply all
Reply to author
Forward
0 new messages