12 - Symfony 4 REST: Refresh Expired JWT

[@aakankshasingh5600]

Which value did u use after refresh token... Starting with a......

[@matheusvieira1873]

Hey, I´m making my first API and just a quick question, why is important refresh the token? In a regular authentication, if the token expire the user will be simple redirect to the login page, why refresh is better and important?

[@OverSeasMedia]

In a regular application the session of the user is refreshed when he is uses the application, Each time you use the app is like extending the time before the session expires. But in the case of an api the you will have to re authenticate each time the token expires because the expiration date is set from the time when you generate token. If the time is set to 30 minutes, this means that wach 30 minutes you have to login again to get a new token. A better solution is to refresh the token.

[@matheusvieira1873]

@@OverSeasMedia Thank you for your answer

[@OverSeasMedia]

I hope you understood what I was trying to say. I feel like I could've done better lol

[@andriisukhoi5672]

Is it possible to store refresh tokens in another table ?

[@jaylordferrer6395]

you can try #[ORM\Table(name: "alternative_table")]

[@naspy971]

awesome thanks man I just needed this

[@jawhermahmoudi8649]

thanks I have a question How can i generate a exel file from my Symfony project ?

[@OverSeasMedia]

Hello there. There plenty of packages for php to generate an Excel file . You could use those or just look for a bundle that could do the same thing . Have you tried anything without any results or you're just looking for suggestions right now ? Let me know if you have any problems with your task :)

[@gasan6209]

Use PhpOffice phpspreadsheet

[@medose7s402]

thanks a lot for the tuto very clear very understandable. i have a question : i want to use OAuth2 as an authentication way in my Api, is it possible to implement it with JWT without using (signing in with socials platform; like google, Facebook, ....) ? i need this plz if possible : i ll need some references for it. and thanks in advance :)

[@OverSeasMedia]

Hello there med . Thank your for the comment . Could you please 3xplain further what you'd like to accomplish ? So you want to secure your server using oauth 2? If that is the case then it is completely possible and there a symfony bundle that can help you do that . I don't think I understand the question exactly, but I'm here to discuss this further more.

[@medose7s402]

@@OverSeasMedia thanks for helping me with that :) my question is: i want to secure my rest api with oauth2 (create new user, using jwt for getting the resources from server) without using signing in via google acount, Facebook or other social acount. coz when i tried to search on the internet i found that we use it to make the user to authenticate by (google acount , fb, github,...) hope you got me

[@OverSeasMedia]

Yes I get what you're trying to do and yes you can do it. Fun fact is that initially I was going to make this an oauth system instead of JWT but something came up. You will get Facebook and Google as providers because that term is related to them and that's where it's most used. You can. Check the friend of symfony oauth server bundle which can give you a similar result

[@medose7s402]

@@OverSeasMedia yeah that is it. but if you give the name exactly of the bundle or its link i ll be very thankful, coz i couldn't find something like that :/

[@OverSeasMedia]

The exact name of the bundle is FriendsOfSymfony/FOSOAuthServerBundle you should find it o either GitHub. But you won't find it on the flex recipies server . I just checked and it's there :)

[@emmanuelaustine680]

nice one

[@OverSeasMedia]

Thanks :)

[@dragongun200]

Thank you :)

[@OverSeasMedia]

You're welcome mate :)

[@is-sam]

Bro speak up we can't hear shit