Hello,
I was checking the server logs, and I found
Token theft detected.
What does this mean and more importantly how it is triggered ? at what scenario you throw this error ?
r
rp_st
10/24/2022, 10:18 AM
Hey! This means that the session’s refresh token was used after it was already used once and it’s access token was used as well.
rp_st
10/24/2022, 10:19 AM
So it could happen if you are querying your APIs manually via postman or something and made a mistake somehow
rp_st
10/24/2022, 10:20 AM
Or well, the refresh token was actually used on a different browser (via manually copy / pasting it)