# Default access token expiry for Apps SDK Oauth integration

**URL:** <https://community.canva.dev/t/default-access-token-expiry-for-apps-sdk-oauth-integration/8428>\
**Category:** Announcements\
**Tags:** apps-in-canva\
**Created:** [November 26, 2025, 7:59pm UTC](https://community.canva.dev/t/default-access-token-expiry-for-apps-sdk-oauth-integration/8428 "2025-11-26T19:59:42Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![blakem](https://avatars.discourse-cdn.com/v4/letter/b/3d9bf3/32.png) [@blakem](https://community.canva.dev/u/blakem)\
**Post date:** [November 26, 2025, 7:59pm UTC](https://community.canva.dev/t/default-access-token-expiry-for-apps-sdk-oauth-integration/8428/1 "2025-11-26T19:59:42Z")

</div>

We’re making a small change to how access token expiry is handled for apps which use the OAuth integration in the Apps SDK.

Canva will now use a default expiry of 90 days if your identity provider (IdP) doesn’t return the [expires\_in](https://datatracker.ietf.org/doc/html/rfc6749#section-5.1) field as part of its access token success response.

- If your configured **IdP returns the `expires_in` field** , your app is not affected by this change.

- If your configured **IdP doesn’t return the `expires_in` field** , your app may be affected by this change. Please note the following:

Note that the duration of the default expiry may change at any time, so please ensure that your app does not depend on its duration.