I checked the Redis from cli and the TTL was set as per the config as 
shared above. But the Refresh Token was considered invalid before that time 
because the TGT through which this Refresh Token generation was initiated 
was already invalidated due to idle timeout.
On Friday, July 18, 2025 at 5:17:56 PM UTC+5:45 Prakash Thapa wrote:

> I am using OIDC in CAS 5.2.2. The validity for Refresh Token is set as 
> below:
>
>  cas.authn.oauth.refreshToken.timeToKillInSeconds=2592000
>
> However, the Refresh Token is expired at around 1.5 to 2 hrs and is 
> removed from CAS ticker registry(Redis in my case) and my client 
> application is not able to pull Access Token/ID_Token using this refresh 
> token.

-- 
- Website: https://apereo.github.io/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/ed304107-be9e-47c2-8e35-b2ce52483804n%40apereo.org.

Reply via email to