Grace period on refresh tokens

We're back with two requested updates. Visma Connect has introduced a grace period setting for one-time refresh tokens and extended the maximum lifetime of re-use token.

One-time tokens grace period

One-time tokens can be quite finicky, as I know some of you have experienced already. One of the main issues was often exchanging the same refresh token twice within a very short timeframe, due to networking issues or simply double requests. Now this can be mitigated.

The new grace period setting allows the same refresh token to be exchanged several times over, even if it has already expired due to being exchanged, as long as it is within the timeframe set. This can be from 5 to 60 seconds. Usually 5 seconds will be sufficient to avoid these annoying errors due to the same refresh token being exchanged twice in a very short timeframe.

Re-use token lifetime

Another requested feature has been longer lifetimes on re-use tokens. These can now exist for up to a year. These are much simpler to handle compared to one-time tokens and with a year lifetime, they also don't interfere to much with the user. The added advantage of these tokens, compared to one-time tokens, is you know exactly when they will expire, since they are more difficult to invalidate. If you struggle with invalidated one-time tokens, this could be an exellent time to switch to re-use tokens!

When will my changes take effect?

Remember though, that these new settings will first take effect, after you change the settings in your Visma Connect application AND the user has reauthorized you, for a new token set, with the new settings. It will not overwrite existing refresh tokens.

Two updates that hopefully help reduce friction for your integration, regarding offline access.

Keep posted for more news.

Have a nice day. :-)