About the Forgot Password flow

John1 · June 20, 2022, 8:49am

Hey all!

I want to just know if it is possible to increase the time limit for the link, from 5 mintues to alteast a day!

Any Help would be appreciated

Thanks in advance

xgp · June 20, 2022, 10:21am

Have you tried increasing “Access Token Lifespan” in “Realm Settings”->“Tokens”?

Here’s where it gets it in the code, but I’m not sure the exact setting that code will look up:

github.com

keycloak/keycloak/blob/main/services/src/main/java/org/keycloak/authentication/authenticators/resetcred/ResetCredentialEmail.java#L89


      
          // we don't want people guessing usernames, so if there is a problem, just continuously challenge
          if (user.getEmail() == null || user.getEmail().trim().length() == 0) {
              event.user(user)
                      .detail(Details.USERNAME, username)
                      .error(Errors.INVALID_EMAIL);
          
          
    context.forkWithSuccessMessage(new FormMessage(Messages.EMAIL_SENT));
              return;
          }
          
          
int validityInSecs = context.getRealm().getActionTokenGeneratedByUserLifespan(ResetCredentialsActionToken.TOKEN_TYPE);
          int absoluteExpirationInSecs = Time.currentTime() + validityInSecs;
          
          
// We send the secret in the email in a link as a query param.
          String authSessionEncodedId = AuthenticationSessionCompoundId.fromAuthSession(authenticationSession).getEncodedId();
          ResetCredentialsActionToken token = new ResetCredentialsActionToken(user.getId(), user.getEmail(), absoluteExpirationInSecs, authSessionEncodedId, authenticationSession.getClient().getClientId());
          String link = UriBuilder
            .fromUri(context.getActionTokenUrl(token.serialize(context.getSession(), context.getRealm(), context.getUriInfo())))
            .build()
            .toString();
          long expirationInMinutes = TimeUnit.SECONDS.toMinutes(validityInSecs);

John1 · June 21, 2022, 5:49am

Thanks Will check it out

Topic		Replies	Views
Keycloak verify email set duration, link expire Configuring the server	1	4130	March 28, 2022
Reset password token duration Getting advice	2	1339	July 28, 2021
Action token lifespan configuration bug(?) Configuring the server	2	945	April 13, 2023
Increase expiration time link in reset password mail	4	7986	April 3, 2020
Set Realm Override User-Initiated Action Lifespan value via API Configuring the server	0	593	April 28, 2021

About the Forgot Password flow

Related topics