AnsweredAssumed Answered

How to Delete Expired Access Tokens

Question asked by Christopher Poole on Jun 13, 2018
Latest reply on Feb 22, 2019 by Matthew Buckett

Hello Canvas Developers,


I have an OAuth workflow working which generates access tokens that expire after 1 hour. I'm building short games that shouldn't extend past that hour so I felt like it would be ok to not use refresh tokens and instead just let those tokens expire. After lots of testing I noticed that Access Tokens were pilling up in my test instance, creating a long list of them in the Settings menu where they're displayed. While I know this isn't necessarily a problem for the average user since they never go into that section anyway, it seems weird to me that even the access tokens that expired still where listed in that area. Shouldn't they disappear? Is my custom Canvas instance not set up correctly or something?


-Christopher Poole