Amazon Cognito now supports refresh token rotation
News
Amazon Cognito has introduced support for OAuth 2.0 refresh token rotation, enhancing security for user authentication.
- Automatically replaces existing refresh tokens with new ones at regular intervals
- Reduces the risk of compromised long-lived tokens
- Maintains uninterrupted user access without required re-authentication
- Balances user experience with improved security posture
- Available in Essentials and Plus tiers across supported AWS Regions
This feature allows developers to automatically update refresh tokens during user sessions, minimizing potential security vulnerabilities while ensuring seamless application access.
The AWS News Feed is currently looking for gold sponsors. If you want to support the AWS community and reach a large audience of AWS professionals, consider sponsoring the AWS News Feed.
Related articles
Apr 30
2025
2025
Amazon Cognito adds enhanced context support for machine-to-machine (M2M) authorization flows
Mar 3
2025
2025
Amazon Cognito now supports access token customization for machine-to-machine (M2M) authorization flows
May 16
2025
2025
Amazon Cognito now supports OIDC prompt parameter
May 21
2024
2024
Amazon Verified Permissions improves support for Cognito tokens
The AWS News Feed is currently looking for silver sponsors. If you want to support the AWS community and reach a large audience of AWS professionals, consider sponsoring the AWS News Feed.