This post talks about security in web login system.
The utility of refresh token
It is a compromise between using refresh token and re-authentication by username and password. Refresh token reduce the probability of password disclosure and give convenience for users since they don''t have to re-input their passwords repeatly …
read more