openid-connect-generic icon indicating copy to clipboard operation
openid-connect-generic copied to clipboard

Published 20 hours ago • verified publisher icon oidc-wp

Feature proposal: setting and/or filter to limit refresh token lifetime

Open pjeby opened this issue 7 years ago • 0 comments

I'd like to be able to be able to set a long timeout for refresh tokens on my Keycloak instance, but have some of my sites use a shorter idle timeout (notably, ones that control more sensitive data).

Since we now track a refresh_expires value, there could be a setting and/or filter to put a cap on the validity duration, and the session would be timed out automatically.

I'd be happy to write a PR for this, implemented as an admin setting. Any thoughts?

pjeby avatar Dec 22 '17 00:12 pjeby