Hi everyone, to my understanding simultaneous login (on various devices) is not possible when one wants to rely solely on rotating refresh tokens in SPA. Example: If a user logs in on device A, an AT and RT are stored on the users device (AT-A & RT-A). Now, if the same user logs in to another devi…

As far as I’m aware what you describe should not be an issue; the refresh tokens generated from the independent logins will also be independent of each other which would mean you could use them separately in each device to continue token renewal. What token rotation prevents is the same refresh tok…

Is simultaneous login possible when using rotating refresh tokens in SPA?

Get Help

system Closed October 6, 2020, 9:11am 5

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
Limit number of active user sessions by revoking refresh tokens upon login? Get Help jwt , actions	2	3544	March 31, 2021
Refresh token not being invalidated after login in different window (after password reset) Get Help	0	1669	April 19, 2022
We've added support for Refresh Token Rotation! Announcements refresh-tokens , announcements , refresh-token-rotate	13	9038	November 2, 2021
Securing Single Page Applications with Refresh Token Rotation Blog Discussions	6	4635	April 15, 2024
Can I save Refresh Token into localStorage if `Refresh Token Rotation` is enabled? Get Help	4	5483	August 11, 2020

Is simultaneous login possible when using rotating refresh tokens in SPA?

Related topics