Stay Fresh: .NET 7 Web API Refresh Tokens 🌊

---

💡 Udemy Online Courses:

Table of Contents:
00:00 Stay Fresh: .NET 7 Web API Refresh Tokens 🌊
03:51 Add the Refresh Token Model
05:21 Change the User Model
06:00 Implement the RefreshToken logic in the Controller
12:39 Refresh the RefreshToken

#PatrickGod #DotNet #RefreshTokens

[axelbryancasauran]

I wish there is a database saving --so it's not only the "idea" we know but the actual usage as well.. i appreciate all your video.. very helpful!

[REDULE]

Hey Patrick, are you thinking about making a tutorial of a mobile app usage of this API ? With for example /get authenticated user profile.

[cherifdiallo]

I would love to see you implement a polly retry to automate the refresh token

[IvanKozlov-reez]

Could you please push this changes in the repo?

[nelsonrivers]

Can you create a video that shows how to implement RefreshToken and save it in a SQL Server database table ? I know you skimped over it in this video. Thank you for the videos on tokens so far. I am following your videos closely, so I can get this right in the real world.

[ChadDavid]

How do you set up https on iis internal use only

[ramjayanthb]

Hey patrick using this jwt token, authenticate in blazor please upload a video on it

[ccnieman]

I'm actually having a hard time wrapping my head around transferring the refresh token (cookie) from the server to an Angular client, then that same client sending the same cookie back to the server during a "refresh token" call, without explicitly sending stringified values through REST, rather leaving them as cookies. I know in Angular's auth.service, a string is returned (the jwt value etc), but is the cookie also there and parseable somewhere? Thanks

[marcioalexandremarcondes]

Cookie with SPA not working in just case... Backend (C#, Node.js, etc) return a access token and refresh token... And after this?? Well, only my opinion... Access token is not saved in database... Why refresh token is saved in database?? The security is in block or not the user in user table, not in create a table to insert the refresh token with user id and check out this...

[mihaistanciu]

Hi. Sorry if this a stupid question, but from client app when shall I make a request to refresh token endpoint? When I start the client app and notice that the current token is expired? Thanks

[alper]

Hello Patrick! thanks for the videos. I watched all of ur JWT token videos and i wanna ask question. Jwt token works fine in my application, but i get 'invalid token' error on jwt debugger even i use secret key??

[I-PixALbI-I]

And now we have an issue with CORS because of Cookies)
If your UI try to call RefreshToken endpoint it will get an Error.

[ashvinpatel]

i have completed full series of 4 videos. i have bit confusion. if i used this webapi in mobile application every 7 day user have to login again ??