SuperTokens is an open source authentication solution offering features like: Different types of login: Email / password, Passwordless (OTP or Magic link based).

SuperTokens.com

what is the expiry of refresh token and access token ?

Hey. Refresh is 100 days, and access token is 1 hour

if i issue new access token with refresh token i will get new AT+RT after this will i am able to generate next new AT+RT using old RT ?

I mean u will, as long as u don’t use the new AT or RT even once

otherwise i will get the theft warning. correct ?

and if i rovoke all the sessions i get lost all AT+RT from the db ?