From c22cce2b771c57b8f50b112e20770c6f9c411272 Mon Sep 17 00:00:00 2001 From: Filip Skokan Date: Sun, 9 Jun 2019 10:09:26 +0200 Subject: [PATCH] docs: formatting [skip ci] --- docs/README.md | 1 + lib/helpers/defaults.js | 2 ++ 2 files changed, 3 insertions(+) diff --git a/docs/README.md b/docs/README.md index fe9fadc9c..306454b43 100644 --- a/docs/README.md +++ b/docs/README.md @@ -2506,6 +2506,7 @@ Configures if and how the OP rotates refresh tokens after they are used. Support - `false` refresh tokens are not rotated and their initial expiration date is final - `true` refresh tokens are rotated when used, current token is marked as consumed and new one is issued with new TTL, when a consumed refresh token is encountered an error is returned instead and the whole token chain (grant) is revoked - `function` returning true/false, true when rotation should occur, false when it shouldn't +

The default configuration value puts forth a sensible refresh token rotation policy - only allows refresh tokens to be rotated (have their TTL prolonged by issuing a new one) for one year - otherwise always rotate public client tokens diff --git a/lib/helpers/defaults.js b/lib/helpers/defaults.js index e4b5bd69d..a7737e7f1 100644 --- a/lib/helpers/defaults.js +++ b/lib/helpers/defaults.js @@ -1807,6 +1807,8 @@ const DEFAULTS = { * encountered an error is returned instead and the whole token chain (grant) is revoked * - `function` returning true/false, true when rotation should occur, false when it shouldn't * + *

+ * * The default configuration value puts forth a sensible refresh token rotation policy * - only allows refresh tokens to be rotated (have their TTL prolonged by issuing a new one) for one year * - otherwise always rotate public client tokens