2025-11-10: Token Service Security Updates

2025-11-10: Token Service Security Updates#

Token Service Security Updates#

Beginning the first week of December, 2025, we will be changing the default lifetime for tokens generated by the Melissa Token Service from 24-Hours to 5 Minutes. This change aims to make token generation more secure for default users as we find that a 24-Hour default lifetime for tokens introduce possible risks for abuse.

What kind of changes should we expect?#

Tokens generated by the Token Service will default to expire in 5 minutes instead of 24-hours when not specifying the TimeSpan option.

Are there any code changes needed to be done on the client side?#

Users who are currently not setting the TimeSpan option and require a longer lifespan for tokens will need to specify a value in the timespan option as documented here:

Otherwise, tokens will be set to expire in 5-minuites (from 24-hours) by default.

Here is an example of how to override the 5-minute default timespan to 24-hours for tokens:

https://tokenservice.melissadata.net/v3/JSON/Service.svc/RequestToken?\
&L={{customerId}}\
&P={{productname}}\
&IP={{ipAddress (optional)}}\
&TS=2400

What is the schedule for releasing the engine improvements for other countries?#

This update is currently scheduled for release on the first week of December.

—

Thank you for your attention to this update. If you have any questions or concerns, please contact Tech Support at Tech@Melissa.com or call 800-MELISSA ext. 4 (800-635-4772 ext. 4).

Thanks,

The Melissa Team

Contents