vincbeck commented on issue #59359:
URL: https://github.com/apache/airflow/issues/59359#issuecomment-3756450149

   Multiple things in this issue:
   - As mentioned by @Ilardi, the refresh token works as long as the refresh 
token is valid. That's how the refresh token flow works in general. You have a 
JWT token that expires, when this token expires it is automatically refreshed 
using another token: `refresh_token`. However, when this token expire, there is 
not much we can do, the session expired and as a result you get some access 
denied exceptions. If you want to increase the refresh token lifetime you can 
do it in Keycloak by configuring `Client Session Idle `
   - We should handle that scenario in the refresh_token middleware so that we 
no longer have 500s. I'll take that one
   - We should also probably redirect automatically the user to the login page 
when that happens. I'll take that one too


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to