Refresh token

[Goutham Bandri]

How do I create refresh token with this library?

Refresh token can be used when a JWT expires to get a new JWT.

Regards, Goutham Kumar

[Goutham Bandri]

Sorry, I did not know where and whom to ask this question, hence created an issue. I use jose4j for JWT in my project.

[Brian Campbell]

Refresh tokens are typically implemented as a long secure random string value that keys into some persistent server side storage rather than as JWTs. If you really want to do it with a JWT, using a HMAC JWS or AES JWE would probably be the way to go.