Building Microservices API in Go - Refresh Token: Introduction

The video tutorial explains the concept of refresh tokens, their functionality, and why they are used. It covers the process of obtaining access tokens through authentication, the short-lived nature of access tokens, and the user experience issues caused by expired tokens. The tutorial introduces refresh tokens as a solution to generate new access tokens without requiring frequent logins. It also discusses security measures to prevent token leakage and manage refresh tokens effectively. The video concludes with a preview of generating refresh tokens in the login API.

How does the resource server verify the access token?

Describe the process that occurs when an access token expires.

What is the purpose of a refresh token in the authentication flow?

Explain the difference between access tokens and refresh tokens.

What steps should be taken if a refresh token is leaked?