Re: OAUTH2 Authorisation Status
"David Fletcher" <[email protected]> Sat, 02 Apr 2022 13:44:44 +0000
| Newsgroups | gmane.mail.sylpheed.claws.general |
|---|---|
| Message-ID | <5G2BD4lq.1648907084.0983310.dif@localhost> |
> The fix that stores the refresh token with every access is that not > only in git? > If so, this should be fixed in the coming release. Hi Michael, I think that recent fix about the refresh tokens only affected Microsoft servers. They were issuing a new refresh token with every fetch of an access token. Their refresh token had a life of something like 30 days - so as long as you keep logging in, there's a chain of updated refresh tokens that keeps you going without re-authentication. If you stop using the application for a while you'd need to re-authenticate. Maybe Google has changed to that method too? They were previously issuing one refresh token when you first authenticated, and this would last indefinitely (or at least a very long time) to supply new access tokens. But they weren't issuing new refresh tokens with each connection. If Google has switched to the way Microsoft is doing it then the latest update in git would address this. Best regards, David.