# 400 Bad Request

**URL:** <https://devforum.okta.com/t/400-bad-request/2666>\
**Category:** Questions\
**Created:** [September 6, 2018, 7:16am UTC](https://devforum.okta.com/t/400-bad-request/2666 "2018-09-06T07:16:25Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![awesumankur](https://avatars.discourse-cdn.com/v4/letter/a/9fc348/32.png) [@awesumankur](https://devforum.okta.com/u/awesumankur)\
**Post date:** [September 6, 2018, 7:16am UTC](https://devforum.okta.com/t/400-bad-request/2666/1 "2018-09-06T07:16:25Z")

</div>

I kept my okta login page idle for couple of hours now when i try to log in back its giving me 400 error.Is it anything to do with okta\_key ? i was able to reproduce it when i tampered the okta key and send back the request .

Thanks in Advance for the help.

---

<div class="post-metadata">

**Author:** ![jmelberg](https://sea1.discourse-cdn.com/oktadev/user_avatar/devforum.okta.com/jmelberg/32/154_2.png) [@jmelberg](https://devforum.okta.com/u/jmelberg)\
**Post date:** [September 25, 2018, 3:15am UTC](https://devforum.okta.com/t/400-bad-request/2666/3 "2018-09-25T03:15:28Z")

</div>

Hi @awesumankur,

You are correct. The `okta_key` has a fixed lifetime, so anything over ~5 minutes will result in an error.

If you believe this is a common case that your users will encounter (I’d argue that it is a fringe case), you can always redirect back to your `/login` path on the `4xx` error.

Hope this helps!

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/oktadev/original/1X/589c4c5f80de422d01f47cee7185a7fb8227835c.png) [@system](https://devforum.okta.com/u/system)\
**Post date:** [January 17, 2024, 7:24pm UTC](https://devforum.okta.com/t/400-bad-request/2666/4 "2024-01-17T19:24:24Z")

</div>

Closed on January 17, 2024, 7:24pm UTC

This topic was automatically closed 24 hours after the last reply. New replies are no longer allowed.