2025-11-10: Token Service Security Updates#
Token Service Security Updates#
Beginning the first week of December, 2025, we will be changing the default lifetime for tokens generated by the Melissa Token Service from 24-Hours to 5 Minutes. This change aims to make token generation more secure for default users as we find that a 24-Hour default lifetime for tokens introduce possible risks for abuse.
What kind of changes should we expect?#
Tokens generated by the Token Service will default to expire in 5 minutes instead of 24-hours when not specifying the TimeSpan option.
Are there any code changes needed to be done on the client side?#
Users who are currently not setting the TimeSpan option and require a longer lifespan for tokens will need to specify a value in the timespan option as documented here:
Otherwise, tokens will be set to expire in 5-minuites (from 24-hours) by default.
Here is an example of how to override the 5-minute default timespan to 24-hours for tokens:
https://tokenservice.melissadata.net/v3/JSON/Service.svc/RequestToken?\
&L={{customerId}}\
&P={{productname}}\
&IP={{ipAddress (optional)}}\
&TS=2400
What is the schedule for releasing the engine improvements for other countries?#
This update is currently scheduled for release on the first week of December.
—
Thank you for your attention to this update. If you have any questions or concerns, please contact Tech Support at Tech@Melissa.com or call 800-MELISSA ext. 4 (800-635-4772 ext. 4).
Thanks,
The Melissa Team