Your JSON Web Token has expired. Do you have t go to the effort of entering your name and password again? Not if you have a refresh token.

Source code available at: [ Ссылка ]

Topics include:
- Trading off security and convenience
- Synchronizing servers with ClockSkew
- Distinguishing the authentication server and the data server
- Storing refresh tokens on the database
- Returning a new JWT in exchange for and expired JWT and a refresh token
- Revoking a refresh token

свернуть