Skip to content

Commit

Permalink
wordsmithing changes from PR review
Browse files Browse the repository at this point in the history
  • Loading branch information
mooreds committed Aug 15, 2024
1 parent 759febb commit bd481fe
Show file tree
Hide file tree
Showing 2 changed files with 3 additions and 3 deletions.
4 changes: 2 additions & 2 deletions astro/src/content/docs/apis/jwt.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -205,7 +205,7 @@ This API has been available since 1.8.0

## Refresh a JWT

This can be used to extend a centrally managed session, when the refresh token is being used to model a session. [Learn more about using refresh tokens to model sessions](/docs/lifecycle/authenticate-users/logout-session-management).
This can be used to extend a centrally managed session when a refresh token represents a user session. [Learn more about using refresh tokens to model sessions](/docs/lifecycle/authenticate-users/logout-session-management).

### Request

Expand Down Expand Up @@ -289,7 +289,7 @@ Cookie: refresh_token=xRxGGEpVawiUak6He367W3oeOfh+3irw+1G1h1jc; access_token=eyJ

## Retrieve Refresh Tokens

This can be used to examine a centrally managed session, when the refresh token is being used to model a session. [Learn more about using refresh tokens to model sessions](/docs/lifecycle/authenticate-users/logout-session-management).
This can be used to examine a centrally managed session when the refresh token represents a user session. [Learn more about using refresh tokens to model sessions](/docs/lifecycle/authenticate-users/logout-session-management).

### Request

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -124,7 +124,7 @@ This section documents how to implement a centralized session store using Fusion
* Whenever the ChangeBank or ChangeBank Forum application receives a request, call the [Retrieve Refresh Tokens API](/docs/apis/jwt#retrieve-refresh-tokens), using the stored refresh token Id, to check the status of the refresh token. You can call the REST API directly or using one of [the FusionAuth client libraries](/docs/sdks). If the refresh token doesn't exist or is invalid, deny the user access and invalidate the application session.
* When a user logs out from either the ChangeBank or ChangeBank Forum application, revoke the refresh token. Use the [Revoke Refresh Tokens API](/docs/apis/jwt#revoke-refresh-tokens). You can revoke all refresh tokens or just a few. The logic around revocation depends on your business needs. See [Flexible Revocation](#flexible-revocation) for more details.

You are using the refresh token to tie the ChangeBank and ChangeBank Forum applications to FusionAuth. Your applications are then confirming session liveness with FusionAuth each time a request is received.
You are using the refresh token to tie the ChangeBank and ChangeBank Forum applications to FusionAuth. Your applications are confirming session validity with FusionAuth each time a request is received.

### Flow Diagrams Of Common Use Cases

Expand Down

0 comments on commit bd481fe

Please sign in to comment.