Invalid token: Token has expired
Goal Enable a static Jamstack front‑end to automatically renew a Netlify Identity access token before it expires, preserving least‑privilege scopes and avoiding token exposure to XSS. Constraints / Uncertainty The site has no server‑side session; refresh tokens must be stored securely (e.g., httpOnly cookie) and the refresh flow must run without a full page
jamstack