Token auth flow. Refresh token ideas?

[fallenmanrisesup]

No description provided.

[Tony133]

Hi @dailydismay,

Sorry for the late reply, it's been a busy few weeks, however I will also be adding the refresh token feature soon.

[fallenmanrisesup]

@Tony133

What about storing refresh token binded to concrete device. Any ideas on unique identifiers for devices?

[fallenmanrisesup]

I can contribute if u want

[Tony133]

Hi @dailydismay, sorry for the late reply, 🙏🏻

I created a branch to add the update token, I would also like to add the control to invalidate the token, although there are many ways to do it, I am considering to do it via redis, however if you need the update token part, use this branch feat/add-refresh-token after cloning the repository.

As far as unique device identifiers, at the moment I have not yet had the opportunity to do this, in the projects I've been a part of, the authentication part was only required a jwt token without an update token or a basic auth token.

I have created this boilerplate for the NestJS community, hoping it will be useful to those who use NestJS, so the developer has a base from which to meet their needs.

I hope I have been of help.

[Tony133]

We keep track of this here: #532