A SignJWT builder pre-set to the refresh-token typ. The cap is
raised to 90d because that is the point of a refresh token - but the
lifetime you actually pass to .expiresIn() should be as short as your UX
tolerates, and the token should be revocable.
A SignJWT builder pre-set to the refresh-token
typ. The cap is raised to 90d because that is the point of a refresh token - but the lifetime you actually pass to.expiresIn()should be as short as your UX tolerates, and the token should be revocable.