# Refresh user session after profile update

**URL:** <https://community.auth0.com/t/refresh-user-session-after-profile-update/130510>\
**Category:** Get Help\
**Tags:** laravel-auth0, sdks-quickstarts\
**Created:** [March 26, 2024, 2:10pm UTC](https://community.auth0.com/t/refresh-user-session-after-profile-update/130510 "2024-03-26T14:10:23Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![nico.mls](https://upload.wikimedia.org/wikipedia/commons/thumb/7/7c/User_font_awesome.svg/768px-User_font_awesome.svg.png) [@nico.mls](https://community.auth0.com/u/nico.mls)\
**Post date:** [March 26, 2024, 2:10pm UTC](https://community.auth0.com/t/refresh-user-session-after-profile-update/130510/1 "2024-03-26T14:10:23Z")

</div>

Hello,

My PHP project uses the following libraries and frameworks:

- backend Laravel v10.45.1
- frontend SSR with Laravel blade + livewire
- auth0/auth0-php v8.11.1
- auth0/login v7.12.0

In the Auth0 login flow, I add the `app_metadata` key/values to the tokens to be able to retrieve them through the `auth()->user()->myCustomVar` property.

A logged user in my app can trigger an update of a key/value in the `app_metadata` of his profile through the Auth0 management API, this is working fine.  
But once the key/value has been updated in Auth0 backend, the new value is not available through the `auth()->user()->myCustomVar` property, as it is gathered only on login.

How can I refresh the tokens without triggering a logout+login ?

Thanks !

---

<div class="post-metadata">

**Author:** ![remus.ivan](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/remus.ivan/32/68771_2.png) [@remus.ivan](https://community.auth0.com/u/remus.ivan)\
**Post date:** [April 30, 2025, 8:12pm UTC](https://community.auth0.com/t/refresh-user-session-after-profile-update/130510/2 "2025-04-30T20:12:32Z")

</div>

Hi @nico.mls,

Welcome to the Auth0 Community and thank you for posting this, but sorry for answering late.

In order to refresh your tokens without requiring users to go through a whole logout+login flow, you can [Configure Silent Authentication](https://auth0.com/docs/authenticate/login/configure-silent-authentication), which renews the existing tokens as long as the user still has a valid session at Auth0.

This should solve your use case, but I hope it helps others as well.  
Thanks,  
Remus

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/auth0/original/3X/b/5/b560f266932fcce5d57f09a6595bd50518cae3f3.jpeg) [@system](https://community.auth0.com/u/system)\
**Post date:** [May 14, 2025, 8:13pm UTC](https://community.auth0.com/t/refresh-user-session-after-profile-update/130510/3 "2025-05-14T20:13:17Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.
