Refresh Token and Access Token

Why do we need an Access token?

Access and refresh tokens were introduced to reduce the number of times users need to log in using their credentials.

Access Tokens allow users to access services without repeatedly entering their credentials. They are short-lived, typically expiring within minutes or hours. This limited lifespan enhances security, as even if an access token is compromised, it cannot be used indefinitely.

Refresh Tokens serve a similar purpose but with a key difference. They are long-lived and can last for days, weeks, or even longer. Refresh tokens are used to obtain new access tokens when the current ones expire, allowing users to maintain their session without frequent logins.