CODEWITHSUNDEEP
oktaokta-api
Aram Aslanyan
Aram Aslanyan

Reputation: 755

OKTA token for API access

I need a token( or key) to use in API request as bearer token. The idea is to set it once for user and access resources without login. I tried to use access_token for it, but max expiration time is 1 day. So, I need a token: - With expiration time >30 days - which can uniquely identifies user - Contains authentication data, like roles and groups Any idea how it can be done with OKTA?

Upvotes: 1

Views: 727

Answers (1)

afitnerd
afitnerd

Reputation: 736

If you're using OAuth in conjunction with Okta, you can use a refresh_token (which can have a much longer expiration - including unlimited) to fetch a new access_token.

So, you wouldn't need end user (resource owner) interaction. But, when the access_token expires, you would need to fetch a new one using the refresh_token.

Upvotes: 4

Related Questions