OAuth2 Grant Type Password is Revoking other access_token

前端 未结 1 794
别那么骄傲
别那么骄傲 2021-01-24 10:28

I\'ve been trying to learn some server side frameworks these days. I am not an expert of oauth2, but I had use an api with a team. They gave me an access using Resource owner cr

相关标签:
1条回答
  • 2021-01-24 10:43

    The behavior --- whether issuing a new access token invalidates existing access tokens or not --- depends on OAuth 2.0 server implementations. The OAuth 2.0 specification (RFC 6749) does not impose any restrictions on the behavior.

    In fact, a certain OAuth 2.0 server implementation provides a feature to enable server administrators to configure the behavior. The following is a screenshot of the description about the configuration item ("Single Access Token Per Subject").

    So, what matters is not grant_type but the implementation policy of the OAuth 2.0 server you are using.

    0 讨论(0)
提交回复
热议问题