A
A
Artem2014-11-17 10:49:46
OAuth
Artem, 2014-11-17 10:49:46

OAuth server, should I store user access_tokens?

Dear users, the task arose to implement your own OAuth server.
Question. Is it necessary and possible to store the issued access_tokens of users at home? Those. store the current token for each user. And when the user gets a new one (using a refresh_token or by hand), overwrite it.
Otherwise, how to make it so that for each user there is always only one working access_token?

Answer the question

In order to leave comments, you need to log in

1 answer(s)
A
Artem, 2014-11-20
@Etrimus

I will answer my own question, which I also asked on stackoverflow.
Yes, access tokens are stored on the server, it is the responsibility of the server to store the actual user tokens.
Stack Proof - https://stackoverflow.com/questions/26993411/oauth...

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question