refreshTokenHashPepper property

String refreshTokenHashPepper
final

Pepper used for hashing refresh tokens.

This influences the stored refresh token hashes, so it must not be changed for a given deployment, as otherwise all refresh tokens become invalid.

To rotate peppers without invalidating existing refresh tokens, use fallbackRefreshTokenHashPeppers.

Implementation

final String refreshTokenHashPepper;