1

I'm using the MSAL Browser library Login on js client with using acquireTokenSilent or acquireTokenPopup to get access token and refresh token.

The refresh token I'm getting is valid for 1 day as can be seeing on refresh the access token section: enter image description here

I want to change my login process to get a refresh token that will be valid for 90 days. How is it possible?

My server is .NET Core.

Thanks!

Dor Fellus Cohen
  • 69
  • 5

1 Answers1

1

If you need to retain a refresh token for longer, you'll need to use the Authorization Code grant and store it server-side. The expiration of refresh tokens generated using the Implicit grant is fixed at 24 hours.

Marc LaFleur
  • 31,987
  • 4
  • 37
  • 63
  • Hi, using the code grant flow I see that if I don't revoke the token for 24 hours I'm no longer able to get an access token. What should I do? Thanks! – Dor Fellus Cohen Aug 10 '21 at 06:52