In my scenario, to avoid the expiration of token I decide to call the refresh token for every API calls (Adding it in the Interceptor axiosInstance.ts). I don't know whether the approach is correct or not. If it's correct where…
In Magento 2, customer tokens expire after an hour and the user is forced to login again. Is there a way to refresh the token? The docomentation of mangeto does not specify such a mechanism. I am developing a mobile…
I have a problem with refresh token, login api send accessToken (expiration: 30s), refreshToken (expiration: 5min) and cookie 'refreshCookie' (expiration: 5min). This api works correcty. login.js (backend) const express = require('express'); const bcrypt = require('bcrypt'); const jwt = require('jsonwebtoken'); const…
I currently have a refresh token API call after every 60 mints, Here is my condition: **const expires_in = 3600 //This is 3600s comes from auth api if (refreshToken && expires_in * 1000 > Date.now() + 3600000) { // RefreshToken…
I'm practicing node js for server side of my app and react js for client side of my app, and I made my own auth server in node js to verify the refresh token and issue both of refresh and…
We are going to implement a Node.js-based authentication system using access tokens and refresh tokens. Here is the flow: The user logs in with their username and password. If the credentials are valid, the system returns an access token and…
So, I have an interceptor set for api calls. It looks like this: class AuthorizationInterceptor extends Interceptor { @override void onRequest( RequestOptions options, RequestInterceptorHandler handler) async { if (options.headers.containsKey('requiresToken') && options.headers['requiresToken'] == false) { options.headers.remove('requiresToken'); super.onRequest(options, handler); } else {…
Our API is developed on API Gateway + Lambda. Auth logic is laying inside every lambda function. To handle authorization our API provided short lived access token and very long lived refresh token. The reason is why our refresh token…
I want to update my access token using the previous refresh token in DocuSign? I am getting { "error": "invalid_grant", "error_description": "unsupported_grant_type" } Below is how I made the request. $client_id = env('DOCUSIGN_CLIENT_ID'); $client_secret = env('DOCUSIGN_CLIENT_SECRET'); $encoded_client_id = utf8_decode(base64_encode($client_id)); $encoded_client_secret…
I have a set of APIs purely for my own app, so I just have a simple API to create access token, when user provided the email and password /api/access_token (return access_token when email and password matched) The access_token was…