Layer7 API Management

Hello,
Someone knows which is the correct behaviour for the oauth 2 token when an user requests new token?

I have this scenario:

- User A request first token
- User A request a new token without waiting for the first token’s expiration

In this case, is it correct that the first token will be revoked?

Is there a configuration where the same user can request multiple valid token?

Thanks

Hi,

you can use grant type as client_credentials for getting multiple token which is valid across different call.

In case if you are using grant_type as password credentials , then this will expire all the token and only latest token will be validated.

Thanks,

Grajesh

Thanks Grajesh!