P
P
Peter2018-08-24 16:08:58
Access rights
Peter, 2018-08-24 16:08:58

How to extend the authorization time of a player in a web game?

After the player is authenticated, he is given an access token and a refresh token.
When the token's lifetime comes to an end, the system re-requests it using a refresh token.
But in reality, it happens that the user, while in the game, sent an event at the time the token was updated, when the old one was deleted, but he did not receive a new one.
Because this is a game where there is no time to send the event socket again, how to correctly authenticate the client's authorization and how to re-request the token?
Browser game.

Answer the question

In order to leave comments, you need to log in

1 answer(s)
A
abbaboka, 2018-08-28
@abbaboka

What's the problem?
Why can't you send a request in advance, while the old one is not outdated yet and there is time.
And then invalidate the old token only after receiving a new one?

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question