@tyf I got a question regarding absolute expiration time.
Let say I have logged in today and a new refresh token is generated . I closed the browser and logged in again after 4-5 hours . I know this will generate new token but will the absolute expiration time of refresh token be based on first token generation or will it gets updated every time new refresh token is generated ?
Also What if I disabled the refresh token rotation will the new refresh token inherit the absolute lifetime of the older one or it will have its own absolute lifetime as it is single generated refresh token?