JWT Refresh Token #1219

New Issue

MrUnknownDE · 2026-04-06T01:41:31+02:00

MrUnknownDE commented

2026-04-06 01:41:31 +02:00

Originally created by @Timshel on 2/20/2024

To facilitate review decided to move out the switch to a JWT refresh_token from the sso PR https://github.com/dani-garcia/vaultwarden/pull/3899.

Without the SSO logic it's not the most useful still :

Add an expiration on the refresh_token (work like an idle timer reset when a new access_token is generated).
Store the information of the AuthMethod in the token (Password ...).

*Originally created by @Timshel on 2/20/2024* To facilitate review decided to move out the switch to a JWT refresh_token from the sso PR https://github.com/dani-garcia/vaultwarden/pull/3899. Without the SSO logic it's not the most useful still : - Add an expiration on the `refresh_token` (work like an idle timer reset when a new access_token is generated). - Store the information of the `AuthMethod` in the token (`Password` ...).

MrUnknownDE closed this issue

2026-04-06 01:41:31 +02:00

Sign in to join this conversation.

No Label

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github/vaultwarden#1219