diff --git a/src/OpenIddict/OpenIddictExtensions.cs b/src/OpenIddict/OpenIddictExtensions.cs index 659b7c87..87bdefb3 100644 --- a/src/OpenIddict/OpenIddictExtensions.cs +++ b/src/OpenIddict/OpenIddictExtensions.cs @@ -547,8 +547,9 @@ namespace Microsoft.AspNetCore.Builder } /// - /// Disables sliding expiration, which prevents OpenIddict from issuing a new - /// refresh token when receiving a grant_type=refresh_token token request. + /// Disables sliding expiration. When using this option, a single refresh token + /// is issued with a fixed expiration date: when it expires, a complete + /// authorization flow must be started to retrieve a new refresh token. /// /// The services builder used by OpenIddict to register new services. /// The . @@ -928,6 +929,7 @@ namespace Microsoft.AspNetCore.Builder /// /// Sets JWT as the default token format for access tokens. + /// Note: this option cannot be used when using reference tokens. /// /// The services builder used by OpenIddict to register new services. /// The . @@ -974,6 +976,7 @@ namespace Microsoft.AspNetCore.Builder /// a new refresh token is issued for each refresh token request and the previous one /// is automatically revoked (when disabled, no new refresh token is issued and the /// lifetime of the original refresh token is increased by updating the database entry). + /// Note: this option cannot be used when manually disabling sliding expiration. /// /// The services builder used by OpenIddict to register new services. /// The .