php - How to implement 'rolling sessions' for an internal API? -
i have php cms internal rest api. user authenticates against api , gets both session id (via cookie) page views , jwt access token hitting api via ajax.
the session can extended whilst user uses site.
however, api, jwt token has fixed expiry, not 'rolled' session.
is there simple secure way implement similar 'rolling' access token api, session id?
i implement full blown oauth server, , issue refresh tokens well, ui of cms , private command line tool use api feels on kill @ moment....
Comments
Post a Comment