Why do I need to renew refreshToken every month?

D

dron1122021-09-17 11:11:00

JSON Web Token

dron112, 2021-09-17 11:11:00

Why do I need to update the refreshToken every month if it is updated every 15 minutes along with the accessToken ?

Reply

Answer the question

In order to leave comments, you need to log in

1 answer(s)

T

tantumus21, 2021-09-17
@dron112

Because if the user moves away from the computer for 3 hours, then he will have to log in again (after all, the refresh token has failed after 15 minutes). Uncomfortable? Uncomfortable. And if the life of the refresh-token is a month, then it will be thrown out of the system only after a month.