S
S
Sergey2018-11-30 06:04:24
JSON Web Token
Sergey, 2018-11-30 06:04:24

How should a refresh token work?

Hello, I have a question about JWT technology.
The documentation says that tokens need two access and refresh. But when implementing it, I understand that this thing works differently.
Actually questions:
1) access token - is issued for a given period and is never renewed again? It just rots in an hour, for example, and that's it?
2) after it is rotten, can you update it (make a refresh)?
So this should work? Or somehow differently? I don’t see implementations from anyone where two tokens would be generated at once. Project on Laravel and React Native.

Answer the question

In order to leave comments, you need to log in

2 answer(s)
D
Dimka Reactive, 2018-11-30
@Gadz

1) Yes
2) If it is rotten, then refreshToken is called and a new one is issued.

I
Ivan Shumov, 2018-11-30
@inoise

This does not apply to JWTs. JWT is a token format. Your question is related to the protocol it is used with - oauth2 or oidc

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question