Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

Specify maximum active tokens per user per client

See original GitHub issue

In order to comply with, we would like to be able to control the maximum number of active tokens per user per client, such that old tokens are automatically invalidated when the limit is exceeded. An example interface might look like this:

        max-active-tokens: 2

From slack:

@jmcarp We are currently working on features along those lines. Starting with only 1 active refresh token per client/user combo

cc @rememberlenny @cnelson @mogul

Issue Analytics

  • State:open
  • Created 7 years ago
  • Reactions:7
  • Comments:25 (14 by maintainers)

github_iconTop GitHub Comments

cnelsoncommented, May 20, 2020

👋 to all the old homies who got notified by this ancient thread ✌️

sreetummidicommented, Jul 26, 2017

@jmcarp @LinuxBozo We will add this support in the upcoming version of UAA.

Read more comments on GitHub >

github_iconTop Results From Across the Web

Token Best Practices - Auth0
Auth0 limits the amount of active refresh tokens to 200 tokens per user per application. This limit only applies to active tokens. If...
Read more >
How to modify the number of allowable active tokens per user ...
Launch an SSH client, such as PuTTy. · Navigate to /opt/rsa/am/utils: · Run one of the following commands: To set the limit for...
Read more >
Configurable token lifetimes - Microsoft Entra
Learn how to set lifetimes for access, SAML, and ID tokens issued by the Microsoft identity platform.
Read more >
What is the maximum refresh tokens per connected app? 4 or 5?
Requests for refresh tokens increase the Use Count displayed for the application. You must grant access to your Salesforce data from each device ......
Read more >
API Protection token management properties - IBM
Specifies the number of seconds an access token is valid. When the access token becomes invalid, the client cannot use it to access...
Read more >

github_iconTop Related Medium Post

No results found

github_iconTop Related StackOverflow Question

No results found

github_iconTroubleshoot Live Code

Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free

github_iconTop Related Reddit Thread

No results found

github_iconTop Related Hackernoon Post

No results found

github_iconTop Related Tweet

No results found

github_iconTop Related Post

No results found

github_iconTop Related Hashnode Post

No results found