JWT access token in-memory?

Question

I’ve been spending hours and hours on this, this is the first time I am using JWT and would really need some of your thougts.

Right now I store my tokens in separate httpOnly cookies (my access token expires after 15 min and refresh token after 7 days).

I have read that the most secure way to store the tokens is actually using a cookie for the refresh token and in-memory (like in a variable) for the access token.

While I understand this is secure, I do not really understand how it would work in practice. Would it mean that we have to create a new access token with our refresh token on each request? Or is there a way we can make it valid and copied to new variables until it is expired?

I am using react and node btw.

question from:https://stackoverflow.com/questions/65545590/jwt-access-token-in-memory

Answer 1

Waitting for answers