Update token config

Update the access and refresh token lifetimes of the application. Both fields are optional and can be sent independently; an absent field keeps its current value.

The new lifetimes apply to the tokens issued after the call. Tokens already issued keep the lifetime they were signed with.

PUT /v2/session/apps/{appID}/config/tokens

Update token config

cURL

curl --request PUT \
  --url https://api.prelude.dev/v2/session/apps/{appID}/config/tokens \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "access_token_ttl": 900,
  "refresh_token_ttl": 2592000
}
'

200

{
  "access_token_ttl": 900,
  "refresh_token_ttl": 2592000
}

Authorizations

Authorization · string · header · required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Path Parameters

appID · string · required

The id of the app the request refers to. An application's unique identifier.

Examples:

"54e9ujn"

"fvua38g"

Body

application/json

access_token_ttl · integer

How long, in seconds, an access token stays valid before it has to be refreshed. Between 60 and 86400.

Required range: 60 <= x <= 86400

Example:

900

refresh_token_ttl · integer

How long, in seconds, a refresh token, and so the session it belongs to, stays valid. Between 300 and 31536000, and never shorter than access_token_ttl.

Required range: 300 <= x <= 31536000

Example:

2592000

Response

200

application/json

OK

access_token_ttl · integer · required

How long, in seconds, an access token stays valid before it has to be refreshed.

Example:

900

refresh_token_ttl · integer · required

How long, in seconds, a refresh token, and so the session it belongs to, stays valid.

Example:

2592000