magento / magento/community-features
[FEAT] Add token refresh API call to GraphQl and REST API
Nobody has claimed this yet.
- Dominant language
- No language data
- Stars
- 46
- Forks
- 14
- PR merge metrics
- No merged PRs in 30d
Description
Description (*)
As a user, when I am authenticated via token, I would like to be able to refresh my token (either get a new one, or refresh the expiration on my existing token). Currently, with the REST API and GraphQl APIs, there's no known way to do this.
Expected behavior (*)
As a developer, I can securely refresh a customer's authentication token.
Benefits
Basic usability and security improvement for customers. Otherwise, users are forced to re-auth every hour which is obnoxious.
Additional information
cc: @zetlen
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reviewing the existing authentication flows for the GraphQL and REST APIs, then read the linked discussion and the issue comments for the intended security model. Define whether refresh creates a new token or extends the existing expiration, and document tests that verify secure refresh behavior and expiration handling.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- graphql
- Domain
- api, authentication
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100