-
Notifications
You must be signed in to change notification settings - Fork 1
Closed
Labels
Description
Authorization tokens should expire and while it ultimately is the responsibility of the server to do that, the UI should be aware of such a scenario so it can react to an expired token immediately instead of when it tries to use the token in a call that will fail due to the user having an expired token.
All an expired token means is that the user is no longer authenticated and the token should be cleared and the user needs to authenticate. This is different from a reauthentication in that to reauthenticate you must currently be authenticated, but an expired token is not a valid credential for authentication.