Glossary term
What is refresh token? Meaning for developers
A long-lived token used only to get a new short-lived access token. Best practice is to replace it each time it is used.
Learn it properly · The Browser ContractLesson 2: Sessions vs JWT: Stateful vs Stateless LoginWhat a signed JWT is, how it is different from a plain session ID, and where “stateless” stops helping: logging out, expiry, refresh tokens and the claims you must check.