This might be a dumb question. We are calling an API that requires oAuth. The token should be good for an hour. Where would you store the token and expiration date? Right now, we are storing it as a property on the model that does the interaction with the API. We check if it is still valid and get a new one if we need to. But a fwreinit (in ColdBox) is forcing a new token even if it hadn’t expired, which feels weird. Should it be stored in a broader application scope somewhere? Thoughts?

How often are you reinit-ing ColdBox??

Yes, you’re correct, it’s not happening often. We just came across it as we were working on something with it locally and it just felt weird. Felt like a bug in our logic.

You could store it directly in the application or server scope, perhaps.

I tend to store those things in a DB, if it makes sense. That way if the container gets restarted (or another instance gets spun up), they don't need to request a new one. Something like Reddis would work for that too