Add an endpoint for refreshing tokens about jwt-spring-security-demo HOT 7 OPEN

I created the endpoint in a new local branch.

If the current token is expired it returns 401, if not it returns a new token.

I can create a PR for you to review, I think i would need your permission to push ? :-)

Thanks

Jose

from jwt-spring-security-demo.

@jmdopereiro Sorry for that late answer! Just create a pull request so that I can review and merge it.

from jwt-spring-security-demo.

Hi Stephan, I have created a local branch and committed the changes to it, but when I try to push it (not sure I can create the PR without pushing first my branch) I get a 403.

from jwt-spring-security-demo.

Ah, OK. The normal way is to fork this project, create a new branch on your forked project and then create a PR. Could you try that?

from jwt-spring-security-demo.

yeap ok, I did it, what do you think ?

from jwt-spring-security-demo.

I saw it, looks good so far. One thing, did you check, that I fails, if the token you want to refresh is too old? I can't test it myself right now. It shouldn't be possible to refresh a token, that is too old.

from jwt-spring-security-demo.

That's right (sorry I had some troubles with my browser cache). I just retested, decreased the token-validity-in-seconds to 120 and then waited 2 minutes, the new token api is protected as the rest by the JWTFilter so when the current token is expired it doesn't refresh the token but returns 401. Here you have a postman screenshot and the application logs.

from jwt-spring-security-demo.