Validity of Android Management APIs WebTokens

[Sarahshk]

What is the expiry for the webtoken returned from the createWebToken method:  https://developers.google.com/android/work/play/emm-api/v1/enterprises/createWebToken ?

[emptydroid]

Based on general practices and previous implementations, the web token created by the createWebToken method typically has a short expiry time, often ranging from a few minutes to an hour. This is to ensure security and reduce the risk of token misuse.

[jasonbayton]

Offhand I think a few hours. The approach I see taken normally is to generate these on demand as customers click around your solution