Changing scope permissions

Paul R.17

If the scope permissions are later changed in the app, does a new access token apply those changes?
Or is it necessary to revoke the old refresh token, obtain a new refresh token, and then get a new access token to ensure that the app permissions are enforced?

Здравко

---

@Paul R.17 wrote:
If the scope permissions are later changed in the app, does a new access token apply those changes?
...

---

Hi @Paul R.17,

If you mean, "new access token" got at initial authorization - Yes, otherwise - No. The token' rights/scopes are not retroactive; they keep the state as is/was on authorization.

 

---

@Paul R.17 wrote:
... is it necessary to revoke the old refresh token, obtain a new refresh token, and then get a new access token to ensure that the app permissions are enforced?

---

Exactly! 😉

Hope this helps.