php - How to implement 'rolling sessions' for an internal API? -
i have php cms internal rest api. user authenticates against api , gets both session id (via cookie) page views , jwt
access token hitting api via ajax.
the session can extended whilst user uses site.
however, api, jwt
token has fixed expiry, not 'rolled' session.
is there simple secure way implement similar 'rolling' access token api, session id?
i implement full blown oauth
server, , issue refresh tokens well, ui of cms , private command line tool use api feels on kill @ moment....
Comments
Post a Comment