Questions about refresh-token
Read more about refresh-token
python (12.9k questions)
javascript (9.2k questions)
reactjs (4.7k questions)
java (4.2k questions)
java (4.2k questions)
c# (3.5k questions)
c# (3.5k questions)
html (3.3k questions)
Why not to have two access_tokens and two refresh_tokens stored one in cookie and one in localstorage to protect from XSS and CSRF
Background
Scenario is that we have a REACT SPA and a single API which is both a resource server and an authentication server. We want to implement simple tokens based auths. There is no dedicated SSO...
Rychu
Votes: 0
Answers: 1
Invalidating Jwt Token without a blacklist
I want to invalidate refresh jwt token without maintaining a blacklist of used refresh tokens with rotations, for this I had the idea of including a ValidationCode in the payload of the RT that the se...
dbzadnen khiari
Votes: 0
Answers: 1
Initialise user in Blazor application after registration in B2C and refresh token
I've got a Blazor WASM app that uses B2C to register new users.
After the user registers, the user is redirected to the app with the right token.
However, after the registration I would like to initia...
Roberto
Votes: 0
Answers: 0
I can refresh keycloak token in Postman, but I can't it in browser
When I refresh token in Postman everything is ok
enter image description here
But when I do it in browser I have a error like thisenter image description here
My Payloadenter image description here
Вячеслав Мухин
Votes: 0
Answers: 1