Skip to content

Use JWT_REFRESH_EXPIRATION_DELTA as refresh_token expiration delta #2

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed

Conversation

alarrosa14
Copy link

I believe it makes sense to use JWT_REFRESH_EXPIRATION_DELTA setting as refresh_token expiration delta.

I believe it makes sense to use JWT_REFRESH_EXPIRATION_DELTA setting as refresh_token expiration delta.
@ticosax
Copy link
Owner

ticosax commented Jul 1, 2015

please comment on the pull request directly to make them publicly visible in the conversation.

jpadilla#123

But I do not think it is a good idea to mix regular JWT settings with long refresh tokens. As the use-cases are different. If someone wants to use them both at the same time, you defeat the purpose of using long refresh tokens because you enforce re-login too often. Which is the purpose of long refresh tokens... not prompt the user for login.

@ticosax ticosax closed this Jul 1, 2015
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants