Refresh token
A longer-lived, separately managed token used to obtain new short-lived access tokens.
Learn it through a story
- The Token That Knew Too Much (Cybersecurity for Juniors 3, Ch 6)
Related terms
- Recruitment fraud A fake job or internship offer designed to look like a genuine hiring process.
- Red flag A warning sign that something might not be what it claims to be.
- Red team A team authorised to simulate real attacks to find weaknesses.
- Responsible disclosure Reporting a security flaw quietly to whoever can fix it, instead of exploiting or publicising it.
- Restore To bring back files from a backup after losing the originals.
- Revocation The ability to invalidate a specific already-issued token before its natural expiry.