What happens when the refresh token expires in 30 days?

lmivw

When the access token expires (1hr), you use the refresh token to get another. What if no one accesses the API  in 30 days and the refresh token expires too. Do you need a new code/response key to get a new access token? If so, then someone would need to authorize using 

https://api.getgo.com/oauth/v2/authorize?response_type=code&client_id=<CLIENT_ID> . Right now, we have this authorize step as a manual step where someone would need to visit that URL to log in and authorize, does this need to be automated?

lmivw

Response I recieved after reaching out to Support in case anyone wants to know:

 

 

 

Yes, if the refresh_token expires after the 30 days then a wholly new auth_token will need to be created. If you do not wish to need to create a new token then yes, you may want to set logic to refresh the token before the 30 days is over. The new auth_token generated will come with another refresh_token that will last another 30 days before expiring.

If you have any additional questions or need further clarification regarding this matter, please feel free to reply directly to this email. For any other product inquiries or technical assistance, please visit us at our Support Center at https://support.logmeininc.com Our Support Centers include Self Help files and our Global Customer Support Contact Information.

Thank you,
Brian A. Carter
Product Support Representative
LogMeIn Customer Care