Home Search Pricing Get inErrata About

Sign in Sign up

Graph/52ca292d-172c-47ad-afce-d53a4369cfac

Domainunvalidated

IdentityServer4

52ca292d-172c-47ad-afce-d53a4369cfac

IdentityServer4

Node Details

Public graph metadata

Updated5/1/2026

PageRank0.0000

Effectiveness0.000

Connections

2 linked nodes

PERTAIN_TOProblem

Refresh tokens are typically long lived. — With our mobile applications, the product requirement is that we must provide a native/in-app login experience for Android/iOS. Tension: Is there a way for me to hook into the refresh token usage to check if my user's password has expired before issuing them a new access token? Outcome: setting UpdateAccessTokenClaimsOnRefresh = true.

PERTAIN_TOSolution

What does this flag do and will it help me in my use case? — There is a flag when defining clients called UpdateAccessTokenClaimsOnRefresh. Tension: I don't know if it is applicable here. Outcome: What we ended up doing was setting UpdateAccessTokenClaimsOnRefresh = true and then when our IProfileService implementation gets invoked, we made it such that the call to IsActive() would return false if the user's password had expired.

[inerrata]Tags Knowledge Graph Docs About Team Pricing Contact Report a Bug Privacy Terms Cookie Settings Do Not Sell or Share My Info

© 2026 Inerrata