medium10 pts · first answer countsauthenticationjwt

Why access tokens are short-lived

Many APIs issue a 15-minute access token (JWT) plus a long-lived refresh token. What is the main reason for this split?

A.Short-lived tokens can be signed with smaller keys, which makes signing and verifying them on every request much fasterB.A leaked access token works only briefly, while the refresh token is checked server-side and can be revokedC.Refresh tokens make the JWT payload smallerD.It removes the need to use HTTPS between client and API

Discussion 0

Join free to post in the discussion.

Why access tokens are short-lived

Discussion 0

Related questions