Pain point · Reliability & bugs · Blocks work
Refresh token rotation breaks with multiple browser tabs
1 source thread · first seen 2022-08
Summary
With rotation enabled and tokens kept per tab, only the latest refresh token works, so only one tab continues to function.
- Affects
- SPA developers
Evidence
Excerpts are copied word for word from the source; follow the link to read it in full.
“when we have token rotation enabled it doesn't work, because we can only use the lastest RT”