3 ms·

PSD2 at least has built-in expiration. I have to re-authenticate every 3 months or so I think.

• Nextgrid 2y ago
  Problem is that the expiration and "reauth" is handled by the third-party provider (there's no longer an actual cryptographic reauth step), and it's not like anyone is auditing this or is even incentivized to. It's pure security theater.