3 ms·
If you force a check at the start, refresh token seems fine. That's much preferable than popping ux every hour or whenever the access token expires.
by hirsin 7y ago
If you force a check at the start, refresh token seems fine. That's much preferable than popping ux every hour or whenever the access token expires.
- couchand 7y agoThen what's the point? The malicious app would just keep refreshing so you never see the confirmation again, anyway.