JWT Refresh Token | Node.js Tutorial

⭐ Get a Free .COM domain with Premium Plan for 12+ months. Free SSL and Cloudflare included

🔔 SUBSCRIBE for more:

💻 Source code:

🔗 Related crash courses:

🔥 Useful:

💼 Inquiries:

❤️ Support the channel:

🌎 Find me on:

🎬 My gear:

🕒 Timestamps:
00:00 Intro
00:23 Why Refresh Token?
03:26 Recap from previous course
06:07 Create new access token using refresh token
11:39 Test out in Postman
15:41 Deauthenticate - log out

#refreshtoken #jwt #nodejs

Disclaimer:
Some of the links and other products that appear on this video are from companies for which Hong Ly will earn an affiliate commission or referral bonus. Hong Ly is part of an affiliate network and receives compensation for sending traffic to partner sites. The content in this video is accurate as of the posting date. Some of the offers mentioned may no longer be available.

[saptathirtachoudhury]

Nice explanation and take my regards from India

[SaraH-djxg]

This video is so underrated. I've been looking for a video like this for a while. Great explanation, thank you! I just wish there was a follow-up video that shows how to implement this on the frontend. Not sure if I'm doing it right but whenever someone logs in, I send the access token and refresh token altogether, and so I was wondering, how do you update this access token on the frontend when you generate it in the backend?

[rizadwiandhika]

I think you are not really implementing the point number 3. "attacker requires the client id and secret + refresh token". But you just implemented refresh token like regular access token with longer expired time. What's the point creating refresh token then? Why don't just extends the expired time for the access token

[chungtmdev]

In the browser, the refreshToken is stored in a cookie along with the accessToken, right?

[all-eter-]

in the minute 13:20, I always get the invalid token not matter if i use the refresh token or the other and i use within the 10 seconds i am sad :(

[johnnm]

that's dangerous why aren't you invalidating the refresh token on use? a good practice should regenerate an access token and a new refreshtoken. In addition what is the point of validating a refreshtoken?

[rounak]

So where we should save this refresh token??Is it in client side cookie 🍪?

[truonghuyhoang]

Why is it only granting Access token when registering but not Ref Token?

[designcoded]

sir how to refresh the refresh token which expires without logging out

[userxdefault]

Buddy great video. Is it possible to upload these videos on Odysee please🙏🏽

[fatkur]

what if the refresh token expires? have to log in again?