<![CDATA[Length of time for authorization code]]>In the oauth flow, when our backend is given the temporary code which we use to create the jwt, for how long is that code valid?

]]>https://fusionauth.io/community/forum/topic/380/length-of-time-for-authorization-codeRSS for NodeMon, 17 Aug 2026 05:14:02 GMTWed, 09 Sep 2020 21:03:55 GMT60<![CDATA[Reply to Length of time for authorization code on Wed, 09 Sep 2020 21:04:57 GMT]]>It's configurable. If you go to the tenant details page, then to the Advanced tab, you'll see the setting there; it's called Authorization Code. It's also documented in the tenant API, search for tenant.externalIdentifierConfiguration.authorizationGrantIdTimeToLiveInSeconds here: https://fusionauth.io/docs/v1/tech/apis/tenants

Looks like valid durations are between 1 and 600 seconds.

]]>https://fusionauth.io/community/forum/post/1105https://fusionauth.io/community/forum/post/1105Wed, 09 Sep 2020 21:04:57 GMT