Personal access token

Rotate refresh tokens

Whether DSS should expect refresh tokens to be renewed when an access token is retrieved

Path restrictions