Add expiry.refreshToken settings to config.yaml.dist

Signed-off-by: Chance Zibolski <chance.zibolski@gmail.com>
4 years ago · a3e2946cfc
1 changed files with 5 additions and 0 deletions
--- a/config.yaml.dist
+++ b/config.yaml.dist
@ -85,6 +85,11 @@ web:
 #   deviceRequests: "5m"
 #   signingKeys: "6h"
 #   idTokens: "24h"
+#   refreshTokens:
+#     disableRotation: false
+#     reuseInterval: "3s"
+#     validIfNotUsedFor: "2160h" # 90 days
+#     absoluteLifetime: "3960h" # 165 days

 # OAuth2 configuration
 # oauth2: