7
JWT Refresh token
Source: appwrite/appwrite#3306 · opened by @arcanechimp
Is there any possibility of getting the client SDK to return both an access token and a refresh token from the account.createJwt() function in the future?
The refresh token could be used by the server SDK to re-authenticate on the server and would be useful in applications that use server side rendering for the frontend. Particularly when a user hits refresh in the browser, or closes a tab without logging out.
The access token could use the same implementation of the existing JWT that is returned from the client SDK, with a lifetime of 15 mins, and the refresh token could have a lifetime of the session that it is attached to.
The refresh token could be used by the server SDK to re-authenticate on the server and would be useful in applications that use server side rendering for the frontend. Particularly when a user hits refresh in the browser, or closes a tab without logging out.
The access token could use the same implementation of the existing JWT that is returned from the client SDK, with a lifetime of 15 mins, and the refresh token could have a lifetime of the session that it is attached to.
No pledges yet. Be the first to back this.
Comments
Similar requests
Server API Create Account JWT
10 votes · 0 comments
🚀 Feature: JWT Refresh Token
16 votes · 0 comments
Limiting Abuse Control (rate-limiting) to Client-Side Integrations
2 votes · 0 comments
feat: OAuth Provider Group-to-Appwrite Team Mapping
1 vote · 0 comments
[DISCUSSION] New User Login Methods
6 votes · 0 comments
No comments yet.