Posted on
I have API get new access token from refresh token but i wonder that: should revoke refresh token and generate new refresh token when getting new access.
Case 1: api/refresh token => {new_access_token,new_refresh_token} (refresh_token revoked)
Case 2: api/refresh token => {access_token} (refresh_token not revoke)
What is bestpractive, im using Nestjs
For further actions, you may consider blocking this person and/or reporting abuse
☝️ Check out this all-time classic DEV post on visualizing Promises and Async/Await 🤓
Rita Brown -
Tyler Hawkins -
Aditria Pardana -
Sameer Trimade -
Once suspended, cucheng will not be able to comment or publish posts until their suspension is removed.
Once unsuspended, cucheng will be able to comment and publish posts again.
Once unpublished, all posts by cucheng will become hidden and only accessible to themselves.
If cucheng is not suspended, they can still re-publish their posts from their dashboard.
Once unpublished, this post will become invisible to the public and only accessible to Trương Đình Chiến.
They can still re-publish the post if they are not suspended.
Thanks for keeping DEV Community safe. Here is what you can do to flag cucheng:
Unflagging cucheng will restore default visibility to their posts.
Top comments (1)
It is generally recommended to revoke the refresh token when issuing a new access token and refresh token pair. This ensures that the previous refresh token cannot be used to get a new access token if it has been compromised.