Olympus Documentation What is Olympus Architecture Repo Map License Glossary

Athena API Authentication Athena API Errors Athena API Pagination Athena Settings API SDK Settings API

Environment variables

Sequence diagrams Authorization Code + PKCE Client Credentials (M2M)Refresh token rotation RP-initiated logout Email verification roundtrip Password recovery with HMAC token Social IdP linking MFA step-up to AAL2 Brute-force lockout escalation Athena → Kratos admin Caddy → backend routing Production deploy pipeline Encryption key rotation (zero-downtime)pgAdmin OIDC SSO Claude-driven Daedalus deploy via MCP

ReferenceSequence diagrams

Refresh token rotation

Renew access token without re-authenticating

Properties

Refresh token rotation. Hydra issues a new refresh on every refresh; old one dies.
Reuse detection. Hydra treats reuse of a consumed refresh token as evidence of theft; revokes the entire chain.
30-day default lifetime. Configurable. The family of refreshes lives 30 days from initial issuance.

Where to learn more

Integrate, Refresh tokens
Reference, OAuth2 grant: refresh-token

Client Credentials (M2M)

Server-to-server OAuth2 flow

RP-initiated logout

App-initiated end-of-session flow

On this page

Properties Where to learn more