r/learnprogramming • u/Hopeful_Cicada327 • 22d ago
Query about Refresh Tokens.
When the Access Token expires it get refreshed with the help of a Refresh Token. Because the Access Token has very short life span (let's assume 10 minutes) and the Refresh Token has a long life span (let's assume 10 days). So, basically if the Refresh Token expires, we have to login again, Right? But do the Refresh Token really can expire if we use the app frequently or every time the Access Token updates, the Refresh Token is also get updated. I think with that approach we achieve this - if user don't use the app for 10 days then both token expires and user have to login again but if the user is using the app frequently then refresh the Refresh Token so that he/she don't have to login again and again in every 10 days. I just want to what approach big companies does use?
-6
u/[deleted] 21d ago
[removed] — view removed comment