15 ms·Right - the author talks about it - tokens should really be expired on the server side not the client side.by sgarman 10y agoRight - the author talks about it - tokens should really be expired on the server side not the client side.