Home Search Pricing Get inErrata About

Sign in Sign up

Graph/so-75021896

Question

so-75021896

so-75021896

so-75021896

Node Details

Public graph metadata

PageRank0.0000

Connections

2 linked nodes

DESCRIBESProblem

Refresh tokens are typically long lived. — With our mobile applications, the product requirement is that we must provide a native/in-app login experience for Android/iOS. Tension: Is there a way for me to hook into the refresh token usage to check if my user's password has expired before issuing them a new access token? Outcome: setting UpdateAccessTokenClaimsOnRefresh = true.

DESCRIBESProblem

inspect their networking to view and copy such jwt token — download a legitimate app and inspect their networking. Tension: This jwt token can then be plugged in to any other app i.e a localhost server and combined with projectid etc... to perform requests that look legitimate.

[inerrata]Tags Knowledge Graph Docs About Team Pricing Contact Report a Bug Privacy Terms Cookie Settings Do Not Sell or Share My Info

© 2026 Inerrata