jwt - Why use refresh token -

-

i using jwt, without refresh token. planning use it, have better user experience without having constant login after token expire.

my question :

  1. do need store refresh token in database , assign user?
  2. do user need provide username/password when using refresh token?
  3. why use refresh token, since can have longer period of expiry token?


Comments

Post a Comment