ios - 0Auth2: when do you use the refresh token to get a new access token? Before or after it expires? -


i'm developing api used ios app , curious on best practice using refresh token in oauth2. using user password grant generate access token , refresh token.

if token expires every 60 minutes means every 60 minutes client have make 3 consecutive api calls: 1. use access token resource api, 2. api responds invalid token need use refresh token, 3. token refreshed need try initial call again.

so, wanting know if it's best refresh token before expires? or better generate new access token once api has responded expired token error?

not sure there's best practice such, it's more efficient refresh in advance won't make requests can know fail. cost of timer refresh less cost of network communication.

you still need handling token being invalid on request server invalidate token number of other reasons, 'how can make efficient , user friendly' 'can remove of code' kind of thing. handling error response standard, refreshing in advance user friendly.

be cautious refreshing while have in-flight requests , inadvertently cause request fail invalidating token...


Comments

Post a Comment

Popular posts from this blog

Magento/PHP - Get phones on all members in a customer group -

i working on custom magento extension. working around adminhtml part , i've created custom form there. here form code: <?php class vivasindustries_smsnotification_block_adminhtml_sms_sendmass_edit_form extends mage_adminhtml_block_widget_form { public function _preparelayout() { $extensionpath = mage::getmoduledir('js', 'vivasindustries_smsnotification'); $head = $this->getlayout()->getblock('head'); $head->addjs('jquery.js'); $head->addjs('vivas.js'); return parent::_preparelayout(); } protected function _prepareform() { $form = new varien_data_form(array( 'id' => 'edit_form', 'action' => $this->geturl('*/*/save', array('id' => $this->getrequest()->get
Read more

php - .htaccess mod_rewrite for dynamic url which has domain names -

i want convert url ex:( example.com/link.php?url=facebook.com ) ( example.com/facebook.com.php ) how can using .htaccess. or there other process make job easier ? i tried adding script .htaccess file options +followsymlinks rewriteengine on rewriterule url-(.*)\.htm$ link.php?url=$1 but converting url adding "url-" ( example.com/url-facebook.com.php ) i want remove "url-" , want make ( example.com/facebook.com.php ) rewriteengine on rewritecond %{the_request} ^get.*link\.php\?url\= [nc] rewritecond %{request_uri} !/system/.* [nc] rewriterule (.*?)link\.php\?url\=/*(.*) /$1$2 [r=301,ne,l] not sure how above work edit of used use remove index.php url
Read more

Website Login Issue developed in magento -

i have website developed using magento . able login. right now, login failed. infact operations interacts user table failing. need know issue. how figure out? first clear try clear log file second make sure have not upgraded magento and 3rd make sure db accessible in magento -harry p
Read more