IntersectMBO / IntersectMBO/govtool

Update Refresh Token on proposal API Logic to Expire Only Upon Use

Open
#3,689 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
HTML
Stars
21
Forks
29
Avg merge
2d 22h
Merged PRs (30d)
7

Description

## Description
Modify the **refresh token** on proposal API behavior so that it **only expires once it has been used** or **lifespan of token is exceeded**.
This ensures better session continuity and avoids premature expiration due to inactivity or background operations.

## Acceptance Criteria
- [ ] Refresh token is marked as expired **only after it is successfully used** to obtain a new access token.
- [ ] Unused refresh tokens remain valid until explicitly used or revoked.
- [ ] Behavior is consistent across login, token refresh, and logout flows.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.