Do we really need refresh tokens?
I have read a number of posts of many people expressing their confusion around the extra security gained from using an access token and a refresh token to control access to a resource API.
Picking up from this post how-does-a-jwt-refresh-t… Continue reading Do we really need refresh tokens?