Hacker News new | ask | show | jobs
by magicalhippo 2219 days ago
> in practice i have seen access tokens with ttl of a few hours

The JWT tokens we get for m2m from Maskinporten[1] have a TTL of a couple of minutes.

No refresh tokens though, I guess they figure it doesn't make much difference since the "user" is a machine so no hassle just sending a full request again.

[1]: https://difi.github.io/felleslosninger/maskinporten_protocol...