Cognito does not support the rotation of refresh tokens?

Hello, I would like to know if AWS supports the rotation of refresh tokens.

If not, why? Do you think to add this feature?

Chirag_R 支援工程師
2 年前
Can I request you to accept this answer in the link ? It will help me alot. Thanks

主題

安全性、身分識別與合規 AWS Well-Architected Framework

標籤

Amazon Cognito 安全性 Amazon Cognito User Pools

語言

English

Hugo C

已提問 2 年前檢視次數 2168 次

1 個回答

最新
最多得票
最多評論

Cognito doesn't support refresh token rotation. By increasing expiry time of refreshtoken we can extend the amount of time before the user needs to fully login again to obtain a new refresh token. I did found a 3rd party article regarding how to use the refresh token. [1]

Link- https://advancedweb.hu/how-to-use-the-refresh-token-with-cognito/ -- [1]

Regarding the feature request, I would recommend opening up a case with the AWS Support Team & work with them directly.

支援工程師

Chirag_R

已回答 2 年前

Hugo C
2 年前
Thank you for your answer

I will do this

Cognito does not support the rotation of refresh tokens?

相關內容