# identityserver-token-lifecycle

> Claude/Codex skill by [@duendesoftware](https://omgskills.com/library/duendesoftware/index.md) · 9 stars · Updated 2026-10-16

Guide for implementing token types, refresh token management, token exchange (RFC 8693), extension grants, IProfileService claims customization, and token lifetime best practices in Duende IdentityServer.

Tags: ai-agents, claude, claude-code

## Install

```sh
git clone https://github.com/DuendeSoftware/duende-skills /tmp/duende-skills && ln -s /tmp/duende-skills/skills/identityserver-token-lifecycle ~/.claude/skills/identityserver-token-lifecycle
```

## From README

IdentityServer Token Types, Refresh Tokens, and Token Exchange When to Use This Skill Choosing between JWT and reference access tokens for a client Configuring refresh token rotation, sliding expiration, or replay detection Implementing token exchange (RFC 8693) for impersonation or delegation Building an extension grant validator (IExtensionGrantValidator) Customizing which claims appear in identity tokens, access tokens, or userinfo responses via IProfileService Setting token lifetime policies for access tokens and refresh tokens Issuing internal tokens from extensibility code via IIdentityServerTools Understanding identity tokens vs access tokens and their intended audiences Docs: https://docs.duendesoftware.com/identityserver/tokens Token Types Overview Duende IdentityServer issues three primary token types: | Token Type | Purpose | Audience | Format | | -------------- | -------------------------------------------------- | ------------------------------------- |...

## Links

- HTML page: https://omgskills.com/library/duendesoftware/duende-skills/skills/identityserver-token-lifecycle/
- GitHub: https://github.com/DuendeSoftware/duende-skills
- Author: [@duendesoftware](https://omgskills.com/library/duendesoftware/index.md)

## More from this repo

- [aspnetcore-authentication](https://omgskills.com/library/duendesoftware/duende-skills/skills/aspnetcore-authentication/index.md) — ASP.NET Core authentication middleware configuration including OpenID Connect, JWT Bearer, cookie authentication,...
   - [@duendesoftware](https://omgskills.com/library/duendesoftware/index.md) · 9 stars
- [aspnetcore-authorization](https://omgskills.com/library/duendesoftware/duende-skills/skills/aspnetcore-authorization/index.md) — ASP.NET Core authorization patterns including policy-based authorization, IAuthorizationHandler implementations,...
   - [@duendesoftware](https://omgskills.com/library/duendesoftware/index.md) · 9 stars
- [claims-authorization](https://omgskills.com/library/duendesoftware/duende-skills/skills/claims-authorization/index.md) — Claims transformation and profile service patterns for Duende IdentityServer — IProfileService, IClaimsTransformation,...
   - [@duendesoftware](https://omgskills.com/library/duendesoftware/index.md) · 9 stars