bshaffer/oauth2-server-php

Not possible to create JWT refresh tokens

Opened this issue · 0 comments

Currently, it's possible to generate JWT access tokens. However when enabling refresh tokens, these cannot be created in JWT format. I know that the real benefit of JWT tokens (not having to pass by the authorization server when validating access tokens) does not apply to refresh tokens but it would be nice to have it consistent. Also, the authorization server would have to make one db call less in that case.

I'm not sure whether this is a missing feature or design as intended?