FusionAuth
    • Home
    • Categories
    • Recent
    • Popular
    • Pricing
    • Contact us
    • Docs
    • Login

    Refresh Token reuse detection

    Scheduled Pinned Locked Moved
    Q&A
    0
    2
    2.6k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • P
      pleymor
      last edited by

      Hello!

      If refresh tokens have "One Time Use" enabled, and if a second usage attempt is detected on a refresh token:

      Is the whole refresh tokens family invalidated so that all refresh token generated from a stolen one become useless?

      Thank you!

      1 Reply Last reply Reply Quote 0
      • joshuaJ
        joshua
        last edited by

        @pleymor

        Were you able to get this addressed or do you still need assistance?

        Thanks
        Josh

        1 Reply Last reply Reply Quote 0
        • danD dan moved this topic from Q&A
        • danD dan moved this topic from Frequently Asked Questions (FAQ)
        • First post
          Last post