In almost all scenarios, the user will need to run an async operation when pulling a token, redis, firebase, EF and files are all async-compatible so makes sense to use that.
another helpful addition would be to add the last sessionId as a parameter for easy checking - if the session ids match then the session has not been refreshed.
In almost all scenarios, the user will need to run an async operation when pulling a token, redis, firebase, EF and files are all async-compatible so makes sense to use that.