

Changing the Default Token Expiration Time¶

Follow the instructions below to change the default token expiry time based on your requirements.

Changing the default expiration time of application access tokens¶

Access tokens have an expiration time, which is set to 60 minutes by default.

Open the <API-M_HOME>/repository/conf/deployment.toml file
Add or update the app_access_token_validity value under the [oauth.token_validation] section.
```
[oauth.token_validation]
app_access_token_validity = 2000
```

Note

The changes that you do here will be applied only to the new applications that you create.

Alternatively, you can set a default expiration time through the UI when generating/regenerating the application access token.

User access tokens have an expiration time, which is set to 60 minutes by default.

Open the <API-M_HOME>/repository/conf/deployment.toml file
Add or update the user_access_token_validity value under the [oauth.token_validation] section.
```
[oauth.token_validation]
user_access_token_validity = 3000
```

Refresh access tokens have an expiration time, which is set to 24 hours by default.

Open the <API-M_HOME>/repository/conf/deployment.toml file.
Add or update the refresh_token_validity value under the [oauth.token_validation] section.
```
[oauth.token_validation]
refresh_token_validity = 86400
```

Note

Finally, your configuration will look as follows if you have configured all the above configurations.

    [oauth.token_validation]
    app_access_token_validity = 2000
    user_access_token_validity = 3000
    refresh_token_validity = 86400

In addition, see Configuring Caching for several caching options that you can use to optimize key validation.

Top