Report this

What is the reason for this report?

OAuth refresh token lifetime?

Posted on May 28, 2026

When you do the authorization code OAuth workflow for a Digital Ocean OAuth app, you get an access token and a refresh token. The docs clearly state the access token lasts 30 days, unless you refresh or revoke it. Does anyone know how long the refresh token lasts?



This textbox defaults to using Markdown to format your answer.

You can type !ref in this text area to quickly search our full set of tutorials, documentation & marketplace offerings and insert the link!

These answers are provided by our Community. If you find them useful, show some love by clicking the heart. If you run into issues leave a comment, or add your own answer to help others.

Heya, @92acaec68da149b0847eb423ec174a

In practice, OAuth refresh tokens are often long-lived and remain valid until one of the following happens:

  • the user revokes the application authorization,
  • the refresh token is rotated/replaced,
  • the app is deleted, or
  • the provider expires inactive tokens internally.

You may also want to open a support ticket for clarification:

https://www.digitalocean.com/company/contact/support

Regards

The developer cloud

Scale up as you grow — whether you're running one virtual machine or ten thousand.

Start building today

From GPU-powered inference and Kubernetes to managed databases and storage, get everything you need to build, scale, and deploy intelligent applications.

Dark mode is coming soon.