Every story and comment from the Hacker News API, in a layout borrowed from 2001.
A comment on Stop using JSON Web Tokens for user sessions. Parent comment
Not guaranteed for the lifetime of refresh tokens, which is the case for access tokens.
> whats the difference?
A 5 min access token is valid for 5 minutes. A 5 minute refresh token can be revoked before its even used.
There are no comments on this comment yet.
Not guaranteed for the lifetime of refresh tokens, which is the case for access tokens.
> whats the difference?
A 5 min access token is valid for 5 minutes. A 5 minute refresh token can be revoked before its even used.