Just a question:
So as JWTs are stateless and don't have any refresh mechanism, how do you guys handle JWT expirations? Having JWTs with a 1d expiration can be a real pain for the users as they would need to log in again every day, not to mention tokens with a 15m exp, which is, by the way, a recommended way to use them.
Any thoughts?
Just a question:
So as JWTs are stateless and don't have any refresh mechanism, how do you guys handle JWT expirations? Having JWTs with a
1dexpiration can be a real pain for the users as they would need to log in again every day, not to mention tokens with a15mexp, which is, by the way, a recommended way to use them.Any thoughts?