Token Validity

Grant Token (Authorization code)

• Grant token is a one-time use token and valid for three minutes, by default. If you want to extend the expiry time, choose the required time from the drop-down while generating the token from the API console (applicable only to self-clients).
• You can generate a maximum of 10 grant tokens in a span of 10 minutes per client ID. If the limit is reached, "access_denied" exception will be thrown for the remaining time.

Access Token

• Each access token is valid for one hour.
• A maximum of 15 active access tokens can be stored per refresh token. When the 16th token is requested, the oldest token is invalidated. When an invalid access token is used, "INVALID_OAUTHTOKEN" exception will be thrown.
• You can generate a maximum of 10 access tokens from a refresh token in a span of 10 minutes.

• If the 10-minute throttle limit is reached, "Access Denied" error will be thrown. Reuse valid tokens to avoid this exception.

  {
     "error_description":"You have made too many requests continuously. Please try again after some time.",
     "error":"Access Denied", 
     "status":"failure"
  }

Refresh Token

• Refresh tokens do not expire until a user revokes them.
• A maximum of 20 refresh tokens can be stored per user.
• When you generate the 21st refresh token, the first created refresh token gets invalidated.