Is it possible to have a refresh token that never expires?

Help
1

Hey there,

Im working on a Desktop app and im wondering if there is any way of making sure that a refresh token never gets expired.
In a normal webapp the default TTL would be acceptable but in this case its desktop app and i want users to sign in once and forget about it.
So i dont want all sessions to last this long, just the ones from the desktop app.
Is that possible or would i need to do some magic to make this work? (custom endpoint in Directus for example)

2

I think you can artificially increase the refresh_token token expiration date expires inside directus_sessions table after each login/refresh.

Directus stores a separate refresh_token per user agent, so you basically should be able to distinguish your desktop app from other sources of authentication.