Decision: keep JWT (not sessions) in AuthModule for offline mobile tokens.
This commit is contained in:
parent
88b5fa7fb7
commit
39e0c50d68
@ -10,4 +10,9 @@
|
|||||||
rotateRefreshToken(oldToken: string): string {
|
rotateRefreshToken(oldToken: string): string {
|
||||||
return `rotated:${oldToken}:${Date.now()}`;
|
return `rotated:${oldToken}:${Date.now()}`;
|
||||||
}
|
}
|
||||||
|
|
||||||
|
/** Decision: keep JWT (not sessions) so mobile clients can store offline-capable tokens. */
|
||||||
|
usesStatelessJwt(): boolean {
|
||||||
|
return true;
|
||||||
|
}
|
||||||
}
|
}
|
||||||
|
|||||||
Loading…
Reference in New Issue
Block a user