Additional Notes
Why is long-lived access tokens risky in practice?
Track: Java
Topic: Authentication
Focus: JSON Web Tokens (JWT)
Java: JSON Web Tokens (JWT)
Answer
A stolen token remains usable for much longer.
Token lifetime is an operational security choice. A long expiration increases attacker dwell time and reduces your ability to contain incidents quickly.
Token lifetime is an operational security choice. A long expiration increases attacker dwell time and reduces your ability to contain incidents quickly.
Topics: Authentication Java JSON Web Tokens (JWT)