How to configure options for a rotating refresh token?

Jira Development Jira Cloud
,
1

Hi,
We are building apps for Jira and Confluence which use OAuth2.0 for authentication. I came across a documentation which summarizes 3 different configurations available for rotating refresh tokens.
All of these refer to the Auth0 documentations which explain how we need to go to Auth0 dashboard to be able to configure rotating refresh tokens, but we don’t use Auth0 or have an account/dashboard for that matter. How can we change the refresh configuration to support the 10 minutes “Reuse interval or leeway” rotation as mentioned in the link?

We also tried this approach: Superseded: 31 January 2022 - Action required - Deprecating persistent refresh tokens
It suggests the following:

  1. Select your integration in the developer console.
  2. Select Authorization .
  3. Select Use rotating refresh tokens from the refresh token options.
  4. Save your changes.
    but Authorization doesn’t seem to have any rotating refresh tokens options available, perhaps the blog is outdated.

Can someone please guide us on the right way to go about this?

2

Welcome to the Atlassian developer community @DevelopersDashworks,

Thanks for pointing out the problems in the docs. I think the blog does have the answer you need:

In short, if you create a new OAuth 2.0 client with Atlassian, it will have rotating (not persistent) refresh tokens.

3

I don’t think your response addressed the specific question about editing the configuration settings:

All of these refer to the Auth0 documentations which explain how we need to go to Auth0 dashboard to be able to configure rotating refresh tokens, but we don’t use Auth0 or have an account/dashboard for that matter. How can we change the refresh configuration to support the 10 minutes “Reuse interval or leeway” rotation as mentioned in the link?