[PR #12335] feat: support configuration of refresh token expiration by environment variable #27605

Closed
opened 2026-02-21 20:41:51 -05:00 by yindo · 0 comments
Owner

Original Pull Request: https://github.com/langgenius/dify/pull/12335

State: closed
Merged: Yes


Summary

Resolves #12346

From #9233, the refresh token expiration is currently fixed at 30 days.

For security considerations, the refresh token expiration in our use case needs to be set to 1 day.

With this PR, we can customize the refresh token expiration through environment variable, and bringing more flexibility.

The implementation follows the same pattern as ACCESS_TOKEN_EXPIRE_MINUTES and has been verified locally.

Checklist

  • This change requires a documentation update, included: Dify Document
  • I understand that this PR may be closed in case there was no previous discussion or issues. (This doesn't apply to typos!)
  • I've added a test for each change that was introduced, and I tried as much as possible to make a single atomic change.
  • I've updated the documentation accordingly.
  • I ran dev/reformat(backend) and cd web && npx lint-staged(frontend) to appease the lint gods
**Original Pull Request:** https://github.com/langgenius/dify/pull/12335 **State:** closed **Merged:** Yes --- # Summary Resolves #12346 From #9233, the refresh token expiration is currently fixed at 30 days. For security considerations, the refresh token expiration in our use case needs to be set to 1 day. With this PR, we can customize the refresh token expiration through environment variable, and bringing more flexibility. The implementation follows the same pattern as ACCESS_TOKEN_EXPIRE_MINUTES and has been verified locally. # Checklist - [ ] This change requires a documentation update, included: [Dify Document](https://github.com/langgenius/dify-docs) - [x] I understand that this PR may be closed in case there was no previous discussion or issues. (This doesn't apply to typos!) - [x] I've added a test for each change that was introduced, and I tried as much as possible to make a single atomic change. - [x] I've updated the documentation accordingly. - [x] I ran `dev/reformat`(backend) and `cd web && npx lint-staged`(frontend) to appease the lint gods
yindo added the pull-request label 2026-02-21 20:41:51 -05:00
yindo closed this issue 2026-02-21 20:41:51 -05:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: langgenius/dify#27605