Skip to main content

Token handling

Refresh tokens are long-lived credentials issued to OAuth clients that allow them to obtain new access tokens without re-authenticating the user. This API exposes administrative operations for inspecting and revoking refresh tokens within a setup. Tokens can be filtered by client or by user, and the list endpoint supports pagination for large datasets. Revocation is useful for session management and responding to security incidents.

Last updated on