JWT Refresh token #3306
arcanechimp
started this conversation in
Ideas
Replies: 1 comment
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
Uh oh!
There was an error while loading. Please reload this page.
-
Is there any possibility of getting the client SDK to return both an access token and a refresh token from the account.createJwt() function in the future?
The refresh token could be used by the server SDK to re-authenticate on the server and would be useful in applications that use server side rendering for the frontend. Particularly when a user hits refresh in the browser, or closes a tab without logging out.
The access token could use the same implementation of the existing JWT that is returned from the client SDK, with a lifetime of 15 mins, and the refresh token could have a lifetime of the session that it is attached to.
Beta Was this translation helpful? Give feedback.
All reactions