Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: Updated the content for the solution discussed in https://support.wso2.com/jira/browse/CUMBERLANDSUB-148

...

During consent re-authentication, an ASPSP can revoke a previously issued token for an existing consent.  

To enable the token per request:

...

The default configuration revokes the previous token request with the same client-id and scopes as in the existing consent. By default, RenewTokenPerRequest is set to false. You can find the default configuration in the <OB_KM_HOME>/repository/conf/identity

...

/identity.xml file as follows:

Code Block
<OAuth>

...

<RenewTokenPerRequest>false</RenewTokenPerRequest>
</OAuth>


Refresh token validity period

...