These are chat archives for alvarosanchez/spring-security-rest

17th
Oct 2014
ferasodh
@ferasodh
Oct 17 2014 07:12
This message was deleted
This message was deleted
@alvarosanchez What about access token expiration? It seems like it doesn't expire. Isn't this a security threat as most users didn't log out? Is there a way to have refresh token?
Álvaro Sánchez-Mariscal
@alvarosanchez
Oct 17 2014 09:00
@ferasodh tokens do expire when using Memcached. If you're using GORM, you'll have to handle token expiration by yourself via Quartz jobs or similar
@neoecos I have to look deeply at them. Thank you for contributing anyway!
ferasodh
@ferasodh
Oct 17 2014 11:17
@alvarosanchez If using Memcached is their a way to refresh token?
Álvaro Sánchez-Mariscal
@alvarosanchez
Oct 17 2014 12:21
In Memcached they will expire automatically after the configured timeout (1h by default)
They get refreshed on every access