mirror of
				https://gitee.com/gitea/gitea
				synced 2025-11-04 16:40:24 +08:00 
			
		
		
		
	fix documentation for REFRESH_TOKEN_EXPIRATION_TIME (#12642)
REFRESH_TOKEN_EXPIRATION_TIME refers to the refresh token not the access token Fix #12641 Signed-off-by: Andrew Thornton <art27@cantab.net>
This commit is contained in:
		@@ -967,7 +967,7 @@ DEFAULT_MAX_BLOB_SIZE = 10485760
 | 
				
			|||||||
ENABLE = true
 | 
					ENABLE = true
 | 
				
			||||||
; Lifetime of an OAuth2 access token in seconds
 | 
					; Lifetime of an OAuth2 access token in seconds
 | 
				
			||||||
ACCESS_TOKEN_EXPIRATION_TIME=3600
 | 
					ACCESS_TOKEN_EXPIRATION_TIME=3600
 | 
				
			||||||
; Lifetime of an OAuth2 access token in hours
 | 
					; Lifetime of an OAuth2 refresh token in hours
 | 
				
			||||||
REFRESH_TOKEN_EXPIRATION_TIME=730
 | 
					REFRESH_TOKEN_EXPIRATION_TIME=730
 | 
				
			||||||
; Check if refresh token got already used
 | 
					; Check if refresh token got already used
 | 
				
			||||||
INVALIDATE_REFRESH_TOKENS=false
 | 
					INVALIDATE_REFRESH_TOKENS=false
 | 
				
			||||||
 
 | 
				
			|||||||
@@ -615,7 +615,7 @@ NB: You must `REDIRECT_MACARON_LOG` and have `DISABLE_ROUTER_LOG` set to `false`
 | 
				
			|||||||
 | 
					
 | 
				
			||||||
- `ENABLE`: **true**: Enables OAuth2 provider.
 | 
					- `ENABLE`: **true**: Enables OAuth2 provider.
 | 
				
			||||||
- `ACCESS_TOKEN_EXPIRATION_TIME`: **3600**: Lifetime of an OAuth2 access token in seconds
 | 
					- `ACCESS_TOKEN_EXPIRATION_TIME`: **3600**: Lifetime of an OAuth2 access token in seconds
 | 
				
			||||||
- `REFRESH_TOKEN_EXPIRATION_TIME`: **730**: Lifetime of an OAuth2 access token in hours
 | 
					- `REFRESH_TOKEN_EXPIRATION_TIME`: **730**: Lifetime of an OAuth2 refresh token in hours
 | 
				
			||||||
- `INVALIDATE_REFRESH_TOKEN`: **false**: Check if refresh token got already used
 | 
					- `INVALIDATE_REFRESH_TOKEN`: **false**: Check if refresh token got already used
 | 
				
			||||||
- `JWT_SECRET`: **\<empty\>**: OAuth2 authentication secret for access and refresh tokens, change this a unique string.
 | 
					- `JWT_SECRET`: **\<empty\>**: OAuth2 authentication secret for access and refresh tokens, change this a unique string.
 | 
				
			||||||
- `MAX_TOKEN_LENGTH`: **32767**: Maximum length of token/cookie to accept from OAuth2 provider
 | 
					- `MAX_TOKEN_LENGTH`: **32767**: Maximum length of token/cookie to accept from OAuth2 provider
 | 
				
			||||||
 
 | 
				
			|||||||
		Reference in New Issue
	
	Block a user