https://supertokens.com/ logo
Channels
Powered by
#general
  • r

    rp

    01/17/2021, 8:21 PM
    You can have an expiration for the refresh token itself so that if the user is inactive for that much time, they will get logged out
  • r

    rp

    01/17/2021, 8:22 PM
    alternatively, you can have a hard limit such that even if the user is active, when that hard limit is reached, rotating the refresh token would fail
  • i

    iamdevito

    01/17/2021, 8:22 PM
    Ok
  • i

    iamdevito

    01/17/2021, 8:22 PM
    I will choose first option
  • r

    rp

    01/17/2021, 8:23 PM
    cool!
  • i

    iamdevito

    01/17/2021, 8:23 PM
    I got one idea regarding this now I'm talking with you.
  • i

    iamdevito

    01/17/2021, 8:24 PM
    Is it good to store access token and refresh token inside secure cookies?
  • r

    rp

    01/17/2021, 8:24 PM
    yup
  • i

    iamdevito

    01/17/2021, 8:24 PM
    Because we are using rest apis for the application development
  • r

    rp

    01/17/2021, 8:24 PM
    The browser will send the cookies regardless
  • i

    iamdevito

    01/17/2021, 8:25 PM
    Client side is Vue js and backend is PHP
  • r

    rp

    01/17/2021, 8:25 PM
    Hmm
  • i

    iamdevito

    01/17/2021, 8:26 PM
    And we want to publish those API s to our partners. So is it good or bad with secure cookies?
  • i

    iamdevito

    01/17/2021, 8:27 PM
    Currently I'm using authorisation headers with bearer tokens
  • r

    rp

    01/17/2021, 8:27 PM
    If your partners will be using a web browser to query those APIs (within some app they made), then cookies is fine. Else authorisation headers is the way to go
  • i

    iamdevito

    01/17/2021, 8:27 PM
    Okay
  • r

    rp

    01/17/2021, 8:28 PM
    if your APIs will be consumed both ways, then you can even support both methods (cookies XOR auth headers)
  • i

    iamdevito

    01/17/2021, 8:28 PM
    Yeah I have plan like that
  • r

    rp

    01/17/2021, 8:28 PM
    cool
  • i

    iamdevito

    01/17/2021, 8:29 PM
    Anyway thank you for your wonderful support
  • r

    rp

    01/17/2021, 8:29 PM
    Ur welcome 🙂
  • i

    iamdevito

    01/17/2021, 8:29 PM
    😊 😍
  • i

    iamdevito

    01/17/2021, 8:29 PM
    Bye
  • r

    rp

    01/17/2021, 8:29 PM
    Bye
  • i

    iamdevito

    01/17/2021, 8:29 PM
    I'm sorry what is ur name
  • r

    rp

    01/17/2021, 8:29 PM
    It’s Rishabh
  • i

    iamdevito

    01/17/2021, 8:29 PM
    I frgt to ask
  • i

    iamdevito

    01/17/2021, 8:29 PM
    Cool
  • r

    rp

    01/17/2021, 8:29 PM
    And yours?
  • i

    iamdevito

    01/17/2021, 8:30 PM
    I'm jithin from india
1...656667...181Latest