How to deal with refresh token?

Question

PostgreSQL

Before deleting tags, "expert", read the question, at least.. Previously
, I already googled, if I didn’t find anything intelligible.

1. What to put in this token?
   
2. Is it correct if I send it to the client in a cookie with the HTTP-Only flag?
   
3. How to store on the server? (DB: PostgreSQL)
   
   • Create a separate table or can I store a token in the user's line right away?
     
   • What type of field do you need?
     
   
   

Answer 1

Take a look here (About tokens, JSON Web Tokens (JWT), authentication and authorization. Token-Based Authentication)
I advise you to look into the comments, especially here