LuCima's SpaCe

Elasticsearch
Python-NOTes
Security

About refresh_token

Published: 日 18 十二月 2016

By Hou, lu

This post talks about security in web login system.

The utility of refresh token

It is a compromise between using refresh token and re-authentication by username and password. Refresh token reduce the probability of password disclosure and give convenience for users since they don''t have to re-input their passwords repeatly, but it makes the clients hard to implement. Re-authentication can be simply realized though, users have to input their info every time of expiration and take risks of password being stolen.

links

Pelican
Python.org
Jinja2
Zhao, Shaohang

social

github
Stackoverflow
LinkedIn
Email

Proudly powered by Pelican, which takes great advantage of Python.

The theme is by Smashing Magazine, thanks!