Skip to content

Conversation

@phamlequang
Copy link
Collaborator

Add a token_type field to the payload to separate access token vs refresh token.
This will prevent the front-end from using refresh token to authenticate requests.
(Note that refresh token can only be used to renew access token)

@phamlequang phamlequang requested a review from techschool April 20, 2025 07:49
@phamlequang phamlequang self-assigned this Apr 20, 2025
@techschool techschool merged commit 97f000f into master Apr 20, 2025
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants