What are Access and Refresh tokens?

Access token — is a short-lived token used for user authentication when accessing protected resources. It contains information about access rights and typically has a short lifespan (for example, a few minutes or hours).

Refresh token — is a more long-lived token used to obtain a new Access token without re-entering login and password. It is stored securely and allows maintaining the user session without constant re-authentication.

Example of operation:

1. The user logs in and receives Access and Refresh tokens.
2. When the Access token expires, the client sends the Refresh token to the server.
3. The server verifies the Refresh token and issues a new Access token.

This enhances security and convenience in authentication.