Glossary coding Term Page
Refresh Token
A longer-lived token used to reissue fresh access tokens
Core Idea
A refresh token is the longer-lived credential used to obtain a fresh access token after the old one expires. Because it lives longer, storage strategy and theft response matter even more.
Why It Matters Here
Mathbong uses refresh tokens when explaining token renewal, session continuity, and cookie-based storage choices. They sit at the design boundary between smooth UX and strong security.