RED-9128: set revoke request token to true when creating a realm

This commit is contained in:
Dominique Eifländer 2024-09-02 13:20:19 +02:00
parent a540524d52
commit f5f08b215e

View File

@ -597,6 +597,8 @@ public class TenantManagementService implements TenantProvider {
realm.setAccountTheme(tenantUserManagementProperties.getDefaultTheme());
realm.setAccessTokenLifespan(tenantUserManagementProperties.getAccessTokenLifeSpan());
realm.setSsoSessionIdleTimeout(tenantUserManagementProperties.getSsoSessionIdleTimeout());
realm.setRevokeRefreshToken(true);
realm.setRefreshTokenMaxReuse(tenantUserManagementProperties.getRefreshTokenMaxReuse());
if (!ObjectUtils.isEmpty(tenantUserManagementProperties.getPublicServerUrl())) {
Map<String, String> attributes = new HashMap<>();