CODEWITHSUNDEEP
oauth-2.0
dagitab
dagitab

Reputation: 133

OAuth client credentials concept

I just have a question re client_credentials grant type in OAuth 2.0. When a client requests for an access token 2 times, will the access token requested on the first time be invalid?

Thanks!

Upvotes: 0

Views: 152

Answers (1)

jumuro
jumuro

Reputation: 1532

The first obtained access token will be valid until it expires.

A token contains an authentication ticket including the indentity and an expiration time. When the token is decrypted, the server obtains the ticket and checks that the ticket is not expired. It uses the claims included in the ticket for authorization tasks.

Upvotes: 1

Related Questions