FAQ

I have incorrect credentials. Error is saying "Invalid username and password combination".

Ensure values in request are encoded. For testing you can use service like https://www.urlencoder.org/.

Auth request returns error on my GET request.

Auth request is accepting POST requests.

Do generated refresh tokens expire?

Yes, generated refresh tokens in our implementation expire after 14 days. This duration is configured in line with our security policies to balance convenience and security.

How long is an access token valid?

Access tokens are valid for 24 hours. This duration was chosen to ensure that users maintain an active session while minimizing the risk of long-term exposure in case of token compromise.

If 2 clients generate a new access token in parallel, are both access tokens valid? If so, how big a buffer of parallel tokens do you have?

Yes, if two clients generate new access tokens in parallel, both tokens remain valid simultaneously. Our system does not currently limit the number of active access tokens per client, so multiple tokens can be valid at the same time as long as they fall within their respective validity periods.