You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: v6/security/oauth2-security/index.html
+4-4Lines changed: 4 additions & 4 deletions
Original file line number
Diff line number
Diff line change
@@ -1060,17 +1060,17 @@ <h2 id="oauth-token-lifetime-and-refresh-hygiene">OAuth Token Lifetime and Refre
1060
1060
<p>By default, the lifetimes of the <code>access</code> and <code>refresh</code> tokens are set to one day and one month respectively.
1061
1061
Make sure to adjust their values in accordance to your application's needs, with lower values being generally safer.</p>
1062
1062
<blockquote>
1063
-
<p>If your application requires it, you can revoke user OAuth tokens before their expiration by making use of the <code>revokeTokens</code> method of <code>UserService</code>.
1064
-
Read more about the available <ahref="https://docs.mezzio.dev/mezzio-authentication-oauth2/v1/intro/#configuration">configuration options</a>.</p>
1063
+
<p>If your application requires it, you can revoke user OAuth tokens before their expiration by making use of the <code>revokeTokens</code> method of <code>UserService</code>.</p>
1064
+
<p>Read more about the available <ahref="https://docs.mezzio.dev/mezzio-authentication-oauth2/v1/intro/#configuration">configuration options</a>.</p>
1065
1065
</blockquote>
1066
1066
<h2id="autogeneration-of-cryptographic-keys">Autogeneration of Cryptographic Keys</h2>
1067
1067
<p>Dotkernel API makes use of the <code>./vendor/bin/generate-oauth2-keys</code> command from <code>mezzio-authentication-oauth2</code> to automatically regenerate the
1068
1068
public/private key pair used to verify the transmitted JWTs.
1069
1069
This process is done after each <code>composer update</code> (or <code>composer install</code> with no lock file), as specified in <code>composer.json</code> under the <code>scripts.post-update-cmd</code> key.</p>
1070
1070
<p>While hidden to the VCS by default, keep in mind not to commit any local keys.</p>
1071
1071
<blockquote>
1072
-
<p>Autogeneration of keys can be disabled by simply removing the <code>php ./vendor/bin/generate-oauth2-keys</code> command from the mentioned key.
1073
-
While not related to Dotkernel API itself, do ensure that the directory containing the keys is properly secured.</p>
1072
+
<p>Autogeneration of keys can be disabled by simply removing the <code>php ./vendor/bin/generate-oauth2-keys</code> command from the mentioned key.</p>
1073
+
<p>While not related to Dotkernel API itself, do ensure that the directory containing the keys is properly secured.</p>
0 commit comments