web api - how to decrease the length of access token in web api

AccessTokenExpireTimeSpan = TimeSpan.FromDays(1)

 

As i am using the above line in my code to use accesstoken for 24 hours if i requested the token lessthan 24 hours its generating new token then total 2 keys are there within 24 hrs of time. if the first token is expired  then only  i need a request for the new accesstoken.how can i acheive this.

 

Thank You.

OAuth has different flows , the one which you are following is called as Resource Owner Password Credentials

flow , what you are doing is completely valid.

In order to implement a custom authorization server , follow my article 

https://www.sharpencode.com/article/WebApi/authentication-authorization/token-based-authentication

Hi Sachin,

 

Thank you for the reply.

 

If you have that custom provider pls share it.And, also suggest me is the below authentication is ok or need to implement anything else.

 

Actually i developed web api for my client to pull data from our server So i implemented security like bearer token with below credentials

[email protected]&password=password&grant_type=password

tested in postman everthing is working fine.And i am giving the below to the client to authenticate and fetch data is the process correct or need to add any

1. access_token URL to get access token and(giving to client)
2. data URL for pulling data based on access token(giving to client)

Thank You

This is defaut Token generated when you use in-built Oauth provider of Owin.Security

it conatins information of Policies and Roles so you can not manipulate its length by decrease it.

You need to write your own Provider by Extending  OAuthAuthorizationServerProvider 

which is time consuming , also the default length is not that hige that it would impact on performance, so keep it as it is.