Using Google, it seems that the tokens they supply only live for one 3600 seconds and must be renewed. This should be done automatically by the server to enable us to enforce a identity-supplier independent global timeout config key.
A quick remedy could be to cache identity provider objects and maintain a local token -> identity map that times out after the global time out duration value.
Using Google, it seems that the tokens they supply only live for one 3600 seconds and must be renewed. This should be done automatically by the server to enable us to enforce a identity-supplier independent global timeout config key.
A quick remedy could be to cache identity provider objects and maintain a local token -> identity map that times out after the global time out duration value.