Revisit auth token refresh & expiry

Prisma-care / api

Central API for Prisma

https://prisma.care

46 stars 2 forks source link

Revisit auth token refresh & expiry #169

Open archived-m opened 7 years ago

archived-m commented 7 years ago

Mobile users should not have to log in as much as they have to. Check & follow best practices for authentication

archived-m commented 6 years ago

Mobile tokens should never expire or last for a very long time, so I'd set a request header in the mobile app that we verify server-side. We can then determine token expiry time based on who requested it.