为提升您的使用体验,本站正在维护,部分功能暂时无法使用。如果本站文章无法解决您的问题,您想要向社区提问的话,请到 Twitter 上的 @FirefoxSupport 或 Reddit 上的 /r/firefox 提问,我们的支持社区将会很快回复您的疑问。

搜索 | 用户支持

防范以用户支持为名的诈骗。我们绝对不会要求您拨打电话或发送短信,及提供任何个人信息。请使用“举报滥用”选项报告涉及违规的行为。

详细了解

Why does Thunderbird OAUTH2 token expire every 6 months?

  • 6 个回答
  • 0 人有此问题
  • 1 次查看
  • 最后回复者为 Matt

more options

I thought Thunderbird was supposed to manage and automatically renew OAUTH2 tokens once they'd been set up correctly (or use tokens that don't expire). This doesn't seem to be working for me. According to my TB log, the tokens seem to automatically expire every 6 months. And because there are separate tokens for sending and receiving, every time the tokens expire, I have to re-authenticate twice on each of my mail accounts.


Is the 6 month expiration a feature of the OAUTH2 protocol. Is token expiration a Thunderbird feature or a bug? I'm using a Google Workspace/Gsuite (aka gmail). Is the forced token expiration a gmail feature?

Is there any way to disable or lengthen the OAUTH2 token expiration period?

I thought Thunderbird was supposed to manage and automatically renew OAUTH2 tokens once they'd been set up correctly (or use tokens that don't expire). This doesn't seem to be working for me. According to my TB log, the tokens seem to automatically expire every 6 months. And because there are separate tokens for sending and receiving, every time the tokens expire, I have to re-authenticate twice on each of my mail accounts. Is the 6 month expiration a feature of the OAUTH2 protocol. Is token expiration a Thunderbird feature or a bug? I'm using a Google Workspace/Gsuite (aka gmail). Is the forced token expiration a gmail feature? Is there any way to disable or lengthen the OAUTH2 token expiration period?

由bruceadler于修改

所有回复 (6)

more options

I forgot to mention that it's a POP3 email account (not sure if that matters).

more options

bruceadler said

I'm using a Google Workspace/Gsuite (aka gmail). Is the forced token expiration a gmail feature? Is there any way to disable or lengthen the OAUTH2 token expiration period?

It would seem so https://www.google.com/search?client=firefox-b-1-d&q=forced+token+expiration+oauth+

6 months seems reasonable to me.

more options

That's an optional feature of Apigee. So far I haven't yet seen anything which says Gmail implements an expiration of its refresh tokens.

more options

https://developers.google.com/identity/protocols/oauth2 The google documentation leads me to think the settings are in the administrator purview when using workspace. I have never has to re =-authenticate my free google account in Thunderbird on a timed basis, but I have not changed the password either. THat apparently immediately invalidates the token.

more options

I'm absolutely positive the password didn't change. The old password still works just fine.

Checking the Gsuite/Workspace admin pages was the first thing I thought of. I've been all over the Gsuite/Workspace admin pages and couldn't find anything that would allow me to disable or change the OAuth2 Refresh expiration time. There is is an admin page to revoke authorization from a device (ie log out a device), and another to revoke an app permission. But I'm certain I didn't revoke any permissions via the admin pages.

In fact, one of my computers running Thunderbird POP3 on the same account was logged in more recently (5/20/22 versus 4/12/22) and it kept on functioning without having to re-authorize via a google login.

more options

I have no idea. Perhaps antivirus? They tend to do all sorts of SSL/TLS certificate substitution and generally mess up communications in the vain attempt to scan encrypted traffic.

The link I provided lists a number of causes, as well as a link to the admin console information.