Graph API dowload URL expires too quickly

Question

Hi :),

I use an Graph API application to have the download link of a file from my sharepoint, but i have a problem.

In fact, the link expires too quickly (1 hour) because the token expires in 1 hour too.

I would like to know if there is a solution for my case because, I saw that we could no longer configure the expiration time of a token

Best regards

Answer 1

Hi @Nadjim

This is due the token expiry time, this is valid for about one hour, as the documentation mentioned.

And client credential flow will not issue refresh tokens, the client can make the same call again to obtain a new access token.
by the way, you can extend the lifetime of the access token by configuring the access token lifetime policy, but the maximum lifetime of the token still cannot exceed 24 hours.

So if you want to get refresh token the only way is to use auth code flow or ROPC flow.

Answer 2

Hello @Nadjim , actually you can extend the lifetime of an access token however and for security reasons it's recommended to keep it short. In order to obtain a new access token without re-entering your credentials you can obtain and use a refresh token which lifetime can last from 24 hours to 90 days.

Let us know if this answer was helpful to you or if you need additional assistance. If it was helpful, please remember to accept it so that others in the community with similar questions can more easily find a solution.

Answer 3

Hi @Nadjim ,
Per my research, I do agree with VickyKumarMindtreeConsultingPVTLTD-5545 and alfredorevilla-msft's answer. You can set token lifetimes for all apps in your organization, for a multi-tenant (multi-organization) application, or for a specific service principal in your organization. Please refer to the following document to set your lifetimes

https://learn.microsoft.com/en-us/azure/active-directory/develop/configure-token-lifetimes

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

---