Ory is the largest open source community in the world for cloud software application security. We maintain advanced open source security software solving authentication, authorization, access control, application network security, and delegation. Ory implements a variety of industry and best-practice standards including OAuth 2.0 / OAuth 2.1, OpenID Connect, Zero Trust Networking, Google Zanzibar Policy Framework, FIDO2 U2F, WebAuthn, TOTP, and more.

Ory Community

Each refresh token starts with a fresh refresh timer :slightly_smiling_face:

so to confirm: user infinitely stays logged in

you can set a TTL for the refresh token,
I think by default it is 720h

is there any documentation around it. can you pls share any link <@U011D3UQKNY>

Hey <@U04F50TSH7H>
Not yet, I will put up a PR for it.
You can  patch/replace the configuration for TTL like so:
```ory patch oauth2-config &lt;project-id&gt; \
  --replace '/ttl/refresh_token="999h0m0s"'```

You can export the configuration like so:
```ory get oauth2-config &lt;project-id&gt; --format yaml &gt; oauth2-config.yaml```