OAuth and JWT Token Validity

The validity of an OAuth token for a particular service connection is determined by the system that issues the token. In the case of JWT tokens, the expiry date and time are encoded within the token itself. Regardless of the token type and the issuing system, the VB (service) infrastructure will ensure that the token is reissued when the current one expires, provided the user is still logged into IDCS and the calling REST API complies with the OAuth specification. If the user is no longer logged into IDCS, any attempts to reissue a token will redirect the user to the login page.