{"action":"created","issue":{"url":"https://api.github.com/repos/openiddict/openiddict-core/issues/648","repository_url":"https://api.github.com/repos/openiddict/openiddict-core","labels_url":"https://api.github.com/repos/openiddict/openiddict-core/issues/648/labels{/name}","comments_url":"https://api.github.com/repos/openiddict/openiddict-core/issues/648/comments","events_url":"https://api.github.com/repos/openiddict/openiddict-core/issues/648/events","html_url":"https://github.com/openiddict/openiddict-core/issues/648","id":346233157,"node_id":"MDU6SXNzdWUzNDYyMzMxNTc=","number":648,"title":"JWT refresh token storage & validation","user":{"login":"matthiasleitner","id":2040200,"node_id":"MDQ6VXNlcjIwNDAyMDA=","avatar_url":"https://avatars3.githubusercontent.com/u/2040200?v=4","gravatar_id":"","url":"https://api.github.com/users/matthiasleitner","html_url":"https://github.com/matthiasleitner","followers_url":"https://api.github.com/users/matthiasleitner/followers","following_url":"https://api.github.com/users/matthiasleitner/following{/other_user}","gists_url":"https://api.github.com/users/matthiasleitner/gists{/gist_id}","starred_url":"https://api.github.com/users/matthiasleitner/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/matthiasleitner/subscriptions","organizations_url":"https://api.github.com/users/matthiasleitner/orgs","repos_url":"https://api.github.com/users/matthiasleitner/repos","events_url":"https://api.github.com/users/matthiasleitner/events{/privacy}","received_events_url":"https://api.github.com/users/matthiasleitner/received_events","type":"User","site_admin":false},"labels":[{"id":251084798,"node_id":"MDU6TGFiZWwyNTEwODQ3OTg=","url":"https://api.github.com/repos/openiddict/openiddict-core/labels/question","name":"question","color":"cc317c","default":true}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":3,"created_at":"2018-07-31T15:12:44Z","updated_at":"2018-07-31T15:38:02Z","closed_at":null,"author_association":"NONE","body":"I am using openiddict with JWT and have the problem that all refresh token become invalid once I redeploy the application using docker. \r\n\r\nSince I've set a SinginKey I assumed that all tokens should stay valid regardless of application lifetime. \r\n\r\nWe use EntityFramework token store and there are refresh token objects in the database but they don't contain the actual token values.\r\n\r\nCan someone clarify how the refresh tokens are validated?\r\n\r\nThanks in advance"},"comment":{"url":"https://api.github.com/repos/openiddict/openiddict-core/issues/comments/409266208","html_url":"https://github.com/openiddict/openiddict-core/issues/648#issuecomment-409266208","issue_url":"https://api.github.com/repos/openiddict/openiddict-core/issues/648","id":409266208,"node_id":"MDEyOklzc3VlQ29tbWVudDQwOTI2NjIwOA==","user":{"login":"PinpointTownes","id":6998306,"node_id":"MDQ6VXNlcjY5OTgzMDY=","avatar_url":"https://avatars1.githubusercontent.com/u/6998306?v=4","gravatar_id":"","url":"https://api.github.com/users/PinpointTownes","html_url":"https://github.com/PinpointTownes","followers_url":"https://api.github.com/users/PinpointTownes/followers","following_url":"https://api.github.com/users/PinpointTownes/following{/other_user}","gists_url":"https://api.github.com/users/PinpointTownes/gists{/gist_id}","starred_url":"https://api.github.com/users/PinpointTownes/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/PinpointTownes/subscriptions","organizations_url":"https://api.github.com/users/PinpointTownes/orgs","repos_url":"https://api.github.com/users/PinpointTownes/repos","events_url":"https://api.github.com/users/PinpointTownes/events{/privacy}","received_events_url":"https://api.github.com/users/PinpointTownes/received_events","type":"User","site_admin":false},"created_at":"2018-07-31T15:38:02Z","updated_at":"2018-07-31T15:38:02Z","author_association":"CONTRIBUTOR","body":"Authorization codes and refresh tokens are always encrypted using Data Protection, independently of the format used for access tokens. In other words, authorization codes and refresh tokens CAN'T be JWT tokens.\r\n\r\nConcerning DP, OpenIddict will use whatever you configure globally. If you configure DP to store the key ring in a Docker volume, it will use it."}}
{"actor":{"display_login":"PinpointTownes"}}