Im using laravel passport(Password Grant client there) for api auth(my

Question

Im using laravel passport(Password Grant client there) for api auth(my

android app) Anyone with with that api key(bearer token) can acess and how will it be secure then ?and when sending request if my access token is expired then ? show error message and use refresh token to obtain new one and send request again ? is there other better way to do api for android ? and do you know where the access_token and refresh_token saved ? i couldnt find on my db

0

23.11.2019

1 ответов

3 просмотра

oyepez003️ ️ · Accepted Answer

oyepez003️ ️

The token is not stored in the database, the token is solved with the JWT platform. JWT is strongly secured and has never be hacked until now... Then don't worry about using Laravel Passport.

0

23.11.2019

Похожие чаты

Im using laravel passport(Password Grant client there) for api auth(my

1 ответов

Похожие вопросы