Isn't there any refresh token mechanism for the JWT authentication ?

[StitiFatah]

Hi,

I experienced being disconnected really often, the access token has a 1 day lifetime but isn't there any refresh token mechanism to refresh it ?
The UX isn't great since it's not an app where you want maximal security like a bank application or whatever.

If it's too tedious to implement why not just using session auth ? It works fine with DRF as well

REST_FRAMEWORK = {
    "DEFAULT_AUTHENTICATION_CLASSES": [
        "rest_framework.authentication.SessionAuthentication",
        # "rest_framework.authentication.TokenAuthentication",
        # 'rest_framework_simplejwt.authentication.JWTAuthentication',
    ],
}

And is easy to implement in your (Vue) frontend with something like that :

import axios from "axios";

axios.defaults.xsrfCookieName = "csrftoken";
axios.defaults.xsrfHeaderName = "X-CSRFTOKEN";

export const BASE_API_URL = process.env.MY_DOMAIN

const axiosInstance = axios.create({
  baseURL: BASE_API_URL,
  timeout: 10000,
  withCredentials: true,
});

export { axiosInstance };