See : http://www.gluu.org/docs/reference/configuration/oxAuth <authorization-code-lifetime>600</authorization-code-lifetime> <refresh-token-lifetime>14400</refresh-token-lifetime> <id-token-lifetime>3600</id-token-lifetime> <short-lived-access-token-lifetime>3600</short-lived-access-token-lifetime> <long-lived-access-token-lifetime>31536000</long-lived-access-token-lifetime> thx,