If credentials are exposed, rotate the client secret immediately and revoke any compromised tokens or access paths.
powered by xwms
An authorization code is a short-lived code that your backend exchanges for an access token.
An access token is a temporary credential used to call protected API endpoints on behalf of a user or client.
A refresh token allows your application to request a new access token without forcing the user to log in again.
Token lifetime depends on your configured security policy and client setup.
Yes. Tokens can be revoked through the dashboard or supported API revocation mechanisms.
Deleting a client invalidates associated credentials and tokens, so existing integrations stop working.
Live support
Start a conversation
You must be logged in to start a support ticket.
Log inWelcome back. Start a ticket or leave your question.
