Lifespan of an access token after integration has been uninstalled


#1

I know that the access token expires after 6 hours, and we use the refresh token to get a new access token, but what I am noticing is if I

a) install an application into a test portal
b) uninstall the application from the test portal
c) I can still make API calls with the token even though the application is uninstalled

What this means is even though the application is uninstalled, I can continue to use the access token and perform API calls which affects the Hubspot account it was installed in.

Is this the expected behaviour? I would have thought uninstalling the application made the access token “void”


#2

Hi @andrewb,

I’ll direct message you for some more details.