php - How to implement 'rolling sessions' for an internal API? -


i have php cms internal rest api. user authenticates against api , gets both session id (via cookie) page views , jwt access token hitting api via ajax.

the session can extended whilst user uses site.

however, api, jwt token has fixed expiry, not 'rolled' session.

is there simple secure way implement similar 'rolling' access token api, session id?

i implement full blown oauth server, , issue refresh tokens well, ui of cms , private command line tool use api feels on kill @ moment....


Comments

Popular posts from this blog

sql - invalid in the select list because it is not contained in either an aggregate function -

Angularjs unit testing - ng-disabled not working when adding text to textarea -

How to start daemon on android by adb -