0

I'm developing standard Laravel REST API. I'm following the Laravel 5.4 API Authentication (Passport) Documentation.

What I need is, User should log in through API and get access token which will not be expired.

oauth_access_tokens table has the expires_at column. The default value is one year. I changed the expires_at date to yesterday. but still, it works. I search about Laravel Passport token lifetime . Someone says the expiration date is not checked at any request.

Is it true? If it is true, what is the purpose of expires_at column? Could anyone explain me please?

Thank You. ("laravel/passport": "~4.0")

1 Answers1

0

Yes, the expires_at column is not checked by the api middleware. The purpose of the table is to check the existence of the token.