niksauer / RoadChatAPI

RESTful backend that provides content management interface and certain location-aware services.
GNU Affero General Public License v3.0
1 stars 0 forks source link

use self-contained JWT tokens #2

Open niksauer opened 6 years ago

niksauer commented 6 years ago

general resources: https://scotch.io/tutorials/the-anatomy-of-a-json-web-token https://www.vaporforums.io/viewTutorialList?category=JSONWebToken

automatic prolongation: https://auth0.com/docs/tokens/refresh-token/current

niksauer commented 6 years ago

delayed with reason: "We believe that JWT is not useful for these use cases so we use a random generated string and we store it on our side." (https://stackoverflow.com/questions/26739167/jwt-json-web-token-automatic-prolongation-of-expiration)