Uploaded August 2026 | Updated September 2026, 2 weeks ago

---

GitHub OAuth apps now support 8-hour access tokens paired with 6-month refresh tokens. In this changelog update, learn how to configure the offline_access scope and shorten token lifespans for better app security. We also cover adding up to 10 callback URLs for dev, staging, and production environments, plus an important security audit tip for legacy wildcard matching.

GitHub OAuth apps get refresh tokens and more callback URLs: https://github.blog/changelog/2026-08-14-multiple-redirect-uris-and-token-refresh-for-oauth-apps/

#GitHub #OAuth #GitHubUpdates

Stay up-to-date on all things GitHub by connecting with us:

YouTube: gh.io/subgithub
Blog: https://github.blog
X: twitter.com/github
LinkedIn: linkedin.com/company/github
Insider newsletter: resources.github.com/newsletter
Instagram: instagram.com/github
TikTok: tiktok.com/@github

About GitHub
It’s where over 180 million developers create, share, and ship the best code possible. It’s a place for anyone, from anywhere, to build anything—it’s where the world builds software. github.com