2 ms·
The entire point of this scheme is that sessions would no longer need to be expired so aggressively. The bearer tokens remain short lived but the asymmetric key
by fc417fc802 2y ago
The entire point of this scheme is that sessions would no longer need to be expired so aggressively. The bearer tokens remain short lived but the asymmetric key model means leaking the underlying session credential is much more difficult.