Oauth Refresh Token Best Practices

[Jici]

Giving an example here

Bubble JWT (JSON Web Token) authentication is wrong

In short, I do not understand the JSON Web Token authentication schema [Screen Shot 2021-04-15 at 9.11.55 AM] The Access Token Endpoint makes sense to me. Scope could make sense - although the server should send that not us. Iss is a login user, which is fine - but you need a password too. The private key is never shared to the client so that is unclear. To go a bit more in detail on this, let’s take a step back and talk about JSON Web Token authentication. I think: Flask-JWT — Flask-JWT 0.…

Probably there’s some more example