Answer the question
In order to leave comments, you need to log in
How should a refresh token work?
Hello, I have a question about JWT technology.
The documentation says that tokens need two access and refresh. But when implementing it, I understand that this thing works differently.
Actually questions:
1) access token - is issued for a given period and is never renewed again? It just rots in an hour, for example, and that's it?
2) after it is rotten, can you update it (make a refresh)?
So this should work? Or somehow differently? I don’t see implementations from anyone where two tokens would be generated at once. Project on Laravel and React Native.
Answer the question
In order to leave comments, you need to log in
1) Yes
2) If it is rotten, then refreshToken is called and a new one is issued.
This does not apply to JWTs. JWT is a token format. Your question is related to the protocol it is used with - oauth2 or oidc
Didn't find what you were looking for?
Ask your questionAsk a Question
731 491 924 answers to any question