https://supertokens.com/ logo
Channels
Powered by
#general
  • r

    rp

    12/25/2020, 7:05 AM
    👍
  • k

    Kazuemon (JP)

    12/28/2020, 7:07 AM
    Hi!
  • r

    rp

    12/28/2020, 8:43 AM
    Hey!
  • i

    iamdevito

    01/14/2021, 4:54 PM
    hi all
  • r

    rp

    01/14/2021, 8:01 PM
    hi @User
  • i

    iamdevito

    01/17/2021, 8:13 PM
    Hello
  • r

    rp

    01/17/2021, 8:13 PM
    hi
  • i

    iamdevito

    01/17/2021, 8:13 PM
    😋
  • r

    rp

    01/17/2021, 8:13 PM
    how r u?
  • i

    iamdevito

    01/17/2021, 8:13 PM
    Fyn
  • i

    iamdevito

    01/17/2021, 8:13 PM
    R u bot or real user?
  • r

    rp

    01/17/2021, 8:14 PM
    real user..
  • r

    rp

    01/17/2021, 8:14 PM
    but I guess a bot would say that too. lol
  • i

    iamdevito

    01/17/2021, 8:14 PM
    Oh sorry i thought u were bot
  • i

    iamdevito

    01/17/2021, 8:14 PM
    Lol
  • i

    iamdevito

    01/17/2021, 8:14 PM
    😩
  • r

    rp

    01/17/2021, 8:14 PM
    haha.. how can I help u?
  • i

    iamdevito

    01/17/2021, 8:15 PM
    I have implemented one JWT authentication in our project
  • r

    rp

    01/17/2021, 8:15 PM
    alright.. and?
  • i

    iamdevito

    01/17/2021, 8:16 PM
    I have one refresh token n one access token. Refresh token will be saved in DB and access token will be saved in user browsers local storage.
  • i

    iamdevito

    01/17/2021, 8:16 PM
    And the refresh token will be passed through secure cookies. Is there any security issues with this implementation
  • i

    iamdevito

    01/17/2021, 8:16 PM
    ??
  • r

    rp

    01/17/2021, 8:17 PM
    yes. There are many that you need to consider. I suggest you have a look at our blog: https://supertokens.io/blog/all-you-need-to-know-about-user-session-security
  • i

    iamdevito

    01/17/2021, 8:17 PM
    I know local storage is not the safest way.
  • i

    iamdevito

    01/17/2021, 8:18 PM
    I have read this blog 2 days before.
  • i

    iamdevito

    01/17/2021, 8:18 PM
    I think 3-4 blogs of supertokens related to this.
  • r

    rp

    01/17/2021, 8:18 PM
    I see. I don't really have much to add onto apart from what that blog says. Do you have any specific question maybe?
  • i

    iamdevito

    01/17/2021, 8:19 PM
    Yeah.
  • i

    iamdevito

    01/17/2021, 8:20 PM
    In that blog you guys saying about one rotating refresh token mechanism. I have implemented this mechanism before but it become endless session for a user.
  • i

    iamdevito

    01/17/2021, 8:20 PM
    So how can we implement that rotating refresh token with specific expiration time.
1...646566...181Latest