complete refresh_token rotation functionality - Githubissues

thefrontside / simulacrum

A simulation platform for use during testing, during development and for high-fidelity application previews

85 stars 14 forks source link

complete refresh_token rotation functionality #254

Open dagda1 opened 1 year ago

dagda1 commented 1 year ago

Although #252 added basic refresh_token functionality, there are still a few remaining features to simulate real refresh_token rotation.

Check whether the token has expired
With refresh_token rotation, all previous refresh_tokens for that session need to be expired
The rotation number should be incremented concerning the current refresh_token when issuing a new refresh_token for the current session

This article is a good resource.