Once I log in, the app keeps sending access tokens. While it doesn’t seem to lead to any issues in the functioning of the app, this seems to be new behaviour. I thought it’s been happening since the time I stopped using Auth0 development keys, but I removed my keys and it’s still happening, so that’s not it (currently using Github social connection, if it’s of relevance).
For Frontend - React SPA
Token durations (seconds)
ID token: 36000
Refresh token rotation (reuse interval): 3600
Absolute lifetime: 2592000
Inactivity lifetime: 1296000
For backend- Go API
Token durations (seconds)
Token expiration: 86400
Token expiration for browser flows: 7200
From the browser console. In my useState hook, I added the console.log line:
const token = await getTokenSilently();
console.log(token);
From the terminal. The “email” is just a namespaced claim I’ve added to my JWT middleware function, but this also shows that the access token is being sent repeatedly.