From 9eb0a3a326fff220b1f3bd4ef2ac7366f3caf2e8 Mon Sep 17 00:00:00 2001
From: Pedro Igor <pigor.craveiro@gmail.com>
Date: Thu, 11 Sep 2025 15:58:47 -0300
Subject: [PATCH] Make sure refresh expiration is set together with setting the
 previous refresh token

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
---
 .../keycloak/broker/oidc/AbstractOAuth2IdentityProvider.java    | 2 --
 1 file changed, 2 deletions(-)

diff --git a/services/src/main/java/org/keycloak/broker/oidc/AbstractOAuth2IdentityProvider.java b/services/src/main/java/org/keycloak/broker/oidc/AbstractOAuth2IdentityProvider.java
index 7787ccfc647..978d2319edc 100755
--- a/services/src/main/java/org/keycloak/broker/oidc/AbstractOAuth2IdentityProvider.java
+++ b/services/src/main/java/org/keycloak/broker/oidc/AbstractOAuth2IdentityProvider.java
@@ -297,8 +297,6 @@ public abstract class AbstractOAuth2IdentityProvider<C extends OAuth2IdentityPro
 
                 if (newResponse.getRefreshToken() == null && previousResponse.getRefreshToken() != null) {
                     newResponse.setRefreshToken(previousResponse.getRefreshToken());
-                }
-                if (newResponse.getRefreshExpiresIn() == null && previousResponse.getRefreshExpiresIn() != null) {
                     newResponse.setRefreshExpiresIn(previousResponse.getRefreshExpiresIn());
                 }
                 if (newResponse.getIdToken() == null && previousResponse.getIdToken() != null) {