1 Matching Annotations
  1. Aug 2021
  2. pragmaticwebsecurity.com pragmaticwebsecurity.com
    An in-depth look at refresh tokens in the browser
    1
    1. pinin 17 Aug 2021
      Hence, the refresh token allows an application to autonomously obtain a new access token from the security token service, without user intervention.

      Although its true, that refreshing token without user interaction is a legal scenario, it is not for UI living in web browser, but rather for the server side apps, perhaps the BEFE.

      REFRESH_TOKEN BROWSER BEFE
    Visit annotations in context

    Tags

    Annotators

    URL

    pragmaticwebsecurity.com/articles/oauthoidc/refresh-token-protection-implications.html