Refresh Token

BIZ TMS Sphinx
1

Hi,

How can I renew the access token after it expires? It seems that I have to use RefreshToken to request a new one, but its content is empty.

Thank you,

1 Like
2

You should just redirect user to login again to get a new access token.

3

Just to save me testing :wink: Where is the best place in a WebCore app to intercept this excpetion and is it a named exception?

4

Sorry, I'm not sure I understand the question...

5

@wlandgraf
I'm not sure if this works as expected. I'm using TSphinxWebLogin. When I redirect to login again, we restart a new connection cycle with username/email and password and then restart application. This is far from practical, especially if the user is in the middle of a long work, and reach the time limit when posting data to server!
I thought that RefreshToken is made to renew the token smoothly.

6

This is an issue. We have a site where the user can add things to a basket before logging in. When we get to the register/login then we have to save state and the restore after the login is successful. This is fine at the point where this happen.

In other apps there could be an amount of data that needs saving, but of course this can't be done to the database as the JWT has expired. So while it is simple enough to redirect to the login, this data will be lost unless we write a lot of save (and then restore, which will be conditional) code to the session/local store.

There are two things that would help:

  1. be able to call for a token refresh so that the timeout can be extended, or
  2. not have Sphinx unloading the underlying application
7

I personally never been too fond of refresh tokens. Here is why: jwt - Why is refresh token is more secure & why do we use refresh token if it can also be stolen? - Stack Overflow

So, in other words what's the different in using refresh tokens or using a long-lived access token?

1 Like
8

I had the idea to refresh the token regularly. But having thought about what you said, you are right.
Thank you very much.

9

This topic was automatically closed 24 hours after the last reply. New replies are no longer allowed.