Does oauth key expire immediately?

[JZhao]

I have setup oauth authentication based on this doc:

https://developers.hubspot.com/docs/api/working-with-oauth

The oauth key expires in 6 hours maximum. If I rotate a new key before that, will the old key becomes invalid immediately? Or is the old key still valid until 6 hours. Does this mean there will be multiple valid key in a certain time?

[Teun]

Hi @JZhao ,

Like I commented in your other post, the API limits for OAuth apply per app per portal. So one install of your app has the 100/10 burst limit. A second install in a different portal will have a new burst limit of 100/10.

[JZhao]

Hi @Teun ,

Thanks for your reply. What I mean is the same install. Like you said, there could be multiple valid oauth tokens if I refresh before the old one expires. Is each oauth token using its own limit? or are all these tokens sharing the same api limit?

[Teun · Accepted solution]

Hi @JZhao ,

The API limits apply to all tokens per install, so no, not each OAuth token has its own limits but each app install. All tokens together share the same API limits.

[Teun]

Hi @JZhao ,

Yes, an access token will stay valid until it has expired, so if you refresh the access token before the old one has expired, you could have multiple tokens.

[JZhao]

Thanks for your reply. If there are multiple valid token, how does API limit apply? Does each token have separate API limit?