Рет қаралды 9,050
Your JSON Web Token has expired. Do you have t go to the effort of entering your name and password again? Not if you have a refresh token.
Source code available at: github.com/Jas...
Topics include:
- Trading off security and convenience
- Synchronizing servers with ClockSkew
- Distinguishing the authentication server and the data server
- Storing refresh tokens on the database
- Returning a new JWT in exchange for and expired JWT and a refresh token
- Revoking a refresh token