Refresh token never expires. Don't need to check for session expiration when refreshing.
This fixes a bug making it impossible to recover a session after the client has been offline for longer than the expiry time of the access token.
What is the current behavior?
Can't use a refresh token beyond the expiry time of the access token.
What is the new behavior?
Client can now try to refresh the access token for as long as it holds the refresh token.
What kind of change does this PR introduce?
Refresh token never expires. Don't need to check for session expiration when refreshing. This fixes a bug making it impossible to recover a session after the client has been offline for longer than the expiry time of the access token.
What is the current behavior?
Can't use a refresh token beyond the expiry time of the access token.
What is the new behavior?
Client can now try to refresh the access token for as long as it holds the refresh token.