Tokens.TokenTimeout

Do access tokens have a short timeout

This test checks if access tokens time out after at most one hour.

View source code on GitHub

Documents

This test is part of the following document(s):

• The OAuth 2.0 Authorization Framework: Bearer Token Usage (RFC6750), section 5.3 (should)
• OAuth 2.0 Threat Model and Security Considerations (RFC6819), section 5.1.5.3 (should)

Back to the test case overview or the threat overview