Open davideastmond opened 1 year ago
If you set the JWT duration to like 60s, then you can see that "too old" tokens aren't accepted. Renewal can be done with a new route which just returns the same token but with a new expiry date + obviously new signature. On it.