Increased Refresh Token Grace Period

Ory Hydra increases the maximum Refresh Token Rotation Grace Period from 30 days to 180 days for instances licensed under the Ory Enterprise License (OEL).

The extended 180-day grace period applies only when a reuse count (rotation_grace_reuse_count) is configured. If no reuse count is set, the limit remains 5 minutes.

Important: The 180-day grace period is intended solely for controlled migration scenarios. It is not recommended for production use due to increased security risk.

See Hydra Refresh Token Rotation Documentation for configuration details.

This update is available now on Ory Hydra Enterprise, and will be included in the next Ory Hydra release.