Breaking News: Grepper is joining You.com. Read the official announcement!

Short-lived Access Tokens with Refresh Tokens

Pragya Keshap answered on February 7, 2023 Popularity 7/10 Helpfulness 3/10

answer Short-lived Access Tokens with Refresh Tokens

Short-lived Access Tokens with Refresh Tokens

Comment

Refresh token rotation is a technique for getting new access tokens using refresh tokens that goes beyond silent authentication. Refresh tokens are typically longer-lived and can be used to request new access tokens after the shorter-lived access tokens expire. Refresh tokens are often used in native applications on mobile devices in conjunction with short-lived access tokens to provide seamless UX without having to issue long-lived access tokens

@Component
public class CustomPostZuulFilter extends ZuulFilter {

    @Override
    public Object run() {
        //...
        Cookie cookie = new Cookie("refreshToken", refreshToken);
        cookie.setHttpOnly(true);
        cookie.setPath(ctx.getRequest().getContextPath() + "/oauth/token");
        cookie.setMaxAge(2592000); // 30 days
        ctx.getResponse().addCookie(cookie);
        //...
    }
}

https://auth0.com/docs/secure/tokens/refresh-tokens/refresh-token-rotation

Popularity 7/10 Helpfulness 3/10 Language java

Source: Grepper

Tags: java

Link to this answer
Share Copy Link

Contributed on Feb 07 2023

Pragya Keshap

0 Answers Avg Quality 2/10

Short-lived Access Tokens with Refresh Tokens

Contents

More Related Answers

Short-lived Access Tokens with Refresh Tokens

Grepper

Documentation

Social

Legal

Contact

Oops, You will need to install Grepper and log-in to perform this action.