Skip to content

V14.7.1.4

Choose a tag to compare

@sujitharamadass sujitharamadass released this 25 May 19:16
· 4 commits to master since this release
859c320

Previously in Intuit’s OAuth2.0 authorization flow, refresh tokens were considered long-lived and remained valid as long as they were used at least every 100 days, making them effectively permanent. This policy has changed. All refresh tokens will now have a maximum validity period of five years. This change ensures that tokens are rotated regularly, reducing the risk associated with long-lived tokens.

When IncludeRefreshTokenHardExpiresIn is set as true while calling the refresh token call, TokenResponse.RefreshTokenHardExpiresIn will have the refresh token expiry value