I am trying to implement authentication in my application and I'm using refresh tokens. I want to know the ideal duration for which a refresh token should be valid.
5 answers
SamsungShineBrightnessRadiance
Wed Oct 30 2024
Refresh tokens possess a lifespan that surpasses access tokens.
EchoPulse
Tue Oct 29 2024
In the case of single page applications, the default duration for refresh tokens is set at 24 hours.
Silvia
Tue Oct 29 2024
For all other applications and scenarios, the default lifetime of refresh tokens is extended to 90 days.
Lucia
Tue Oct 29 2024
This mechanism ensures that users do not have to frequently re-authenticate themselves.
Lorenzo
Tue Oct 29 2024
Every time a refresh token is utilized, it is replaced with a new, fresh token.