Skip to content

Commit 0a1c221

Browse files
committed
Update config description
1 parent ddc0fe5 commit 0a1c221

File tree

1 file changed

+7
-8
lines changed

1 file changed

+7
-8
lines changed

config/config.php

Lines changed: 7 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -100,14 +100,13 @@
100100
| This defines the refresh window, during which the user can refresh their token
101101
| before re-authentication is required.
102102
|
103-
| By default, each refresh will issue a new "iat" (issued at) timestamp, extending
104-
| the refresh period from the most recent refresh. This results in a rolling refresh
105-
| expiry, where the refresh window resets with each token refresh.
106-
|
107-
| To retain a fixed refresh window from the original token creation (i.e., the behavior
108-
| prior to version 2.5.0), set "refresh_iat" to false. With this setting, the refresh
109-
| window will remain based on the original "iat" of the initial token issued, regardless
110-
| of subsequent refreshes.
103+
| By default, a refresh will NOT issue a new "iat" (issued at) timestamp. If changed
104+
| to true, each refresh will issue a new "iat" timestamp, extending the refresh
105+
| period from the most recent refresh. This results in a rolling refresh
106+
|
107+
| To retain a fluid refresh window from the last refresh action (i.e., the behavior between
108+
| version 2.5.0 and 2.8.2), set "refresh_iat" to true. With this setting, the refresh
109+
| window will renew with each subsequent refresh.
111110
|
112111
| The refresh ttl defaults to 2 weeks.
113112
|

0 commit comments

Comments
 (0)