question

C. Gill avatar image
C. Gill asked

Refresh Token changes?

I was under the impression the Access Token changes every 3600 seconds but that the Refresh Token will stay constant. I have noticed that after each authentication both tokens change. What is the best way to track an amazon user: currently I am using the 'amazon user_id'. Does the refresh token only change upon a successful login? Does it expire over time?
login with amazon
10 |5000
Toggle Comment visibility. Current Visibility: Viewable by all users

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

3 Answers

Nick Gardner avatar image
Nick Gardner answered
Hi, The refresh token should only change if the user de-authorizes your app and then re-authorizes it. This is specifically for the access grant process. Thanks, Nick
10 |5000
Toggle Comment visibility. Current Visibility: Viewable by all users

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

C. Gill avatar image
C. Gill answered
Thanks for the reply, I realized I was doing this all a bit backwards; reading this now: https://images-na.ssl-images-amazon.com/images/G/01/lwa/dev/docs/website-developer-guide._TTH_.pdf
10 |5000
Toggle Comment visibility. Current Visibility: Viewable by all users

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

C. Gill avatar image
C. Gill answered
noted in developer guide: [i]"When you are granted an access token, you may also receive a refresh token. A refresh token is valid for longer than an access token, and allows you to trade in the refresh token for a new access token and a new refresh token."[/i]
10 |5000
Toggle Comment visibility. Current Visibility: Viewable by all users

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.