What are Refresh Tokens?! and...How to Use Them Securely
Channel: OktaDev
Date: 2023-01-30

In this video we will explore the concept of refresh tokens, learn how they compare to other token types, and understand how they let us balance security, usability, and privacy. 

*Check out the corresponding blog post to this video here:*
https://auth0.com/blog/refresh-tokens-what-are-they-and-when-to-use-them/ 

*Auth0 Token Best Practices doc:* 
https://auth0.com/docs/secure/tokens/token-best-practices 

*Chapters:* 
00:00 Introduction 
00:40 What is a Token?
02:04 What is a ID Token?
02:53 What is an Access Token?
04:56 What is a Refresh Token?
05:55 When to Use Refresh Tokens?
06:40 Authorization and Authentication Flows
08:50 Refresh Token Rotation
09:11 Keeping Refresh Tokens Secure
10:29 Refresh Token Rotation
11:38 Refresh Token Automatic Reuse Detection
14:52 Using Refresh Tokens to Balance Security, Convenience and Privacy
16:05 Locally Storing Your Refresh Tokens?!
17:54 Token Best Practices
18:50 Conclusion

*Sign up for our monthly newsletter!* https://a0.to/zeroindex

#security #authentication #developer 
___________________________________________ 
Learn with Auth0 by Okta
Try Auth0 for free - https://a0.to/yt-signup 
The Auth0 by Okta blog - https://a0.to/blog 
___________________________________________ 
Follow Us on Social 
Twitter - https://twitter.com/oktadev
LinkedIn - https://www.linkedin.com/company/oktadev