Will upgrading FusionAuth invalidate user tokens and force re-login?
-
When planning a FusionAuth upgrade, will existing user sessions and tokens be invalidated, requiring users to log back in?
Specifically:
- Are tokens automatically invalidated during the upgrade process?
- Will users experience forced logouts?
- What should be considered when planning the upgrade to minimize user impact?
-
Usually no — FusionAuth upgrades do not log users out or invalidate tokens.
However, there is one important exception: if your upgrade path includes v1.60.0, some tokens may be invalidated due to changes in token structure. The specific changes are deterministic and documented in the release notes:
Even when tokens are invalidated in v1.60.0, users with a valid refresh token should self-heal without needing to manually log in again.
Additionally, if your upgrade path includes v1.69.0, be aware of changes to key management that may require attention. Review the migration guide:
Recommendation: Review the release notes for any versions in your upgrade path to understand specific token behavior changes and plan accordingly.
-
D dan has marked this topic as solved