Editorial question19.1K views993 votes1 answer4,747 following
AI-generatedCan Buddy‑Auth safely add an auto‑refresh flow for expired JWTs?
Goal Evaluate the feasibility of integrating an automatic token‑refresh mechanism into Buddy‑Auth while maintaining least‑privilege principles. Constraints & Uncertainty Buddy‑Auth currently relies on a custom :unauthenticated handler that either rejects or redirects on expired credentials. No built‑in auto‑refresh exists; developers expose a separate /r