Skip to main content
Question

Never Expiring Refresh Tokens...

  • May 22, 2025
  • 2 replies
  • 13 views
C
Forum|alt.badge.img

Is it possible to get a never-expiring Refresh Token (similar to how other Cloud Providers using OAuth work) for use in server-to-server implementations where no user would be there to authenticate the connection when needed? The 60 days limit for Refresh Token will not work in our scenario.

    2 replies

    C
    Forum|alt.badge.img

    Hello, 

    We do not currently allow for never expiring tokens for security reasons. If you would like to see this feature added please ensure you submit your feedback to our product team at https://pulse.box.com/. Have you considered using one of our official Box SDKs which take care of token handling for you? 

    Best,

    Kourtney, Box Developer Advocate

    C
    Forum|alt.badge.img

    Hi Kourtney,

    Thanks for the response. I haven't looked into the SDK option which can take care of token handling. I will look into it and get back to you if I have any questions.

    Terms of ServiceAccessibility statement