Refresh Tokens

For the sake of security, we often set an expiration time for our tokens (flask-jwt-extended defaults that to 15 minutes). Because a token will expire, we need a function to refresh it without users putting in their credentials again.

Flask-JWT-Extended provides refresh-token-related functions. A refresh token is a long-lived token that can be used to generate new access tokens. Please don't mix up refresh tokens and access tokens. A refresh token can only be used to obtain a new access token; it cannot be used as an access token to access restricted endpoints. For example, endpoints that have the jwt_required() or jwt_optional() decorators need an access token.

Here's a brief explanation of the refresh-token-related functions in Flask-JWT-Extended:

• create_access_token: This function creates a new access token.
• create_refresh_token: This function creates a refresh token.
• jwt_refresh_token_required: This is a decorator specifying that the...