Token Issue

zoe
zoe LSEG
in Elektron

If 2 instance obtain token with the same credentials, will one instance get kicked out during token renewal?


Tagged:

Best Answer

  • Jirapongse
    Jirapongse ✭✭✭✭✭
    Answer ✓

    @zoe

    Thank you for reaching out to us.

    Yes, this is a limitation of the Account authorization V1 (Machine ID, Password, and Client ID).

    There is only one valid refresh token at a time. If the second instance uses the same credentials to get tokens, the previous refresh token owned by the first instance will be invalidated. Therefore, the first instance can't use to renew an access token. Then, the first instance must use the Authorization V1 credentials to get a new refresh and access token. Consequently, the refresh token owned by the second instance will be invalidated.

    In conclusion, each instance that uses the same Authorization V1 credentials will compete for a valid refresh token.

    This issue doesn't happen with the account authorization V2 (Client ID and Client Secret).


Answers

Categories