...
During consent re-authentication, an ASPSP can revoke a previously issued token for an existing consent.
To enable the token per request:
...
The default configuration revokes the previous token request with the same client-id and scopes as in the existing consent. By default, RenewTokenPerRequest
is set to false
. You can find the default configuration in the <OB_KM_HOME>/repository/conf/identity
...
/
as follows:identity.xml
file
Code Block |
---|
<OAuth>
|
...
<RenewTokenPerRequest>false</RenewTokenPerRequest> </OAuth> |
Refresh token validity period
...