[CSHARP-3260] Realm authentication token logic Created: 18/Nov/20  Updated: 27/Oct/23  Resolved: 23/Nov/20

Status: Closed
Project: C# Driver
Component/s: API
Affects Version/s: None
Fix Version/s: None

Type: Task Priority: Major - P3
Reporter: Mats Persson Assignee: Unassigned
Resolution: Works as Designed Votes: 0
Labels: None
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified


 Description   

I have been looking into using mongoDb fully for my service and saw the authentication part of Realm which looked neat. Then I started to dig into this and found out that none of the SDKs seems to support the use of the refresh token that you get once you login? There doesn't seem to be any API where you can validate if a token is valid any more? The refresh token lifetime seems to be 30 mins which doesn't work at all in a mobile concept since you wanna keep the user logged in between the uses of the app you need to be able to refresh the access token when you login which won't be possible if the refresh token is only alive for 30 mins.

Is there any plans on improving this so this can be used in a real example? And what is the timeplan in that case so I know if I will be able to use this for my scenario or not.



 Comments   
Comment by Brian Munkholm (Inactive) [ 23/Nov/20 ]

Hi Mats,
I believe I saw the same question in the Forums. Did you get an answer there?
The SDK's will automatically obtain a new token before the old token expires. The short duration is there to ensure you serverside can decide to not approve a refresh.

Generated at Wed Feb 07 21:44:50 UTC 2024 using Jira 9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66.