• Home
  • Categories
  • Recent
  • Popular
  • Pricing
  • Contact us
  • Docs
  • Login
FusionAuth
  • Home
  • Categories
  • Recent
  • Popular
  • Pricing
  • Contact us
  • Docs
  • Login

Refresh Token reuse detection

Scheduled Pinned Locked Moved
Q&A
0
2
1.3k
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • P
    pleymor
    last edited by 17 Aug 2021, 16:11

    Hello!

    If refresh tokens have "One Time Use" enabled, and if a second usage attempt is detected on a refresh token:

    Is the whole refresh tokens family invalidated so that all refresh token generated from a stolen one become useless?

    Thank you!

    1 Reply Last reply Reply Quote 0
    • J
      joshua
      last edited by 31 Aug 2021, 00:15

      @pleymor

      Were you able to get this addressed or do you still need assistance?

      Thanks
      Josh

      1 Reply Last reply Reply Quote 0
      • First post
        Last post