mirror of
https://github.com/logto-io/logto.git
synced 2025-01-06 20:40:08 -05:00
356 B
356 B
@logto/console |
---|
patch |
fix display logic for "Always issue refresh token" and "Refresh token TTL" according to OIDC configuration
- Public clients (authentication method is none) are not allowed to disable refresh token rotation;
- Web public applications (i.e. SPA) with refresh token rotation enabled are not allowed to set refresh token TTL.