Automatically Prolong JWT Token

[okyksl]

We have to automatically prolong JWT token whenever it is close to expiration time. Here is a related discussion I found on stackoverflow.

[srknzl]

Yes I am reading it. And we can do this I think :

A good pattern is to refresh the token before it expires.

Set the token expiration to one week and refresh the token every time the user open the web application and every one hour. If a user doesn't open the application for more than a week, they will have to login again and this is acceptable web application UX.

To refresh the token your API needs a new endpoint that receives a valid, not expired JWT and returns the same signed JWT with the new expiration field. Then the web application will store the token somewhere.

[srknzl]

This is done , close ?

[okyksl]

Nope, it's not handled.