☰
›

Does regenerating a Kite Connect API secret invalidate existing access tokens?

Vass_b
Vass_b in General
Hello Kite Connect team,

I use an existing Kite Connect app called SmartEngine for a research system.

My API secret may have been exposed, so I need to regenerate it. Before proceeding, I would like to confirm:

Does regenerating the API secret immediately invalidate an already-issued access token?

Will existing API requests continue working until the access token expires, or will they fail immediately?

Will I need to generate a new access token using the new secret?

Can this be done without creating a new app or incurring any additional subscription charges?

I want to secure the existing app while avoiding disruption to my current integration.

Thank you.
  • nagavenij
    nagavenij
    Regenerating the API secret does not invalidate an already-issued access token. The existing access token remains valid until it expires or is invalidated through another action, such as logging out or a master logout.

    The regenerated API secret must be used when generating a new access token through the standard Kite Connect login flow.

    You do not need to create a new app or subscribe to a new plan. To regenerate your API secret, navigate to My Apps in the Kite Connect Developer Console, select your app, and use the option to regenerate the API secret.

    For more details, please refer to the Kite Connect login flow documentation.

    If you suspect that your credentials have been compromised, we recommend changing your account password, regenerating your API secret, and generating a new access token.
Sign In or Register to comment.