What is the appropriate setting to use regarding refresh token expiration and refresh token usage when you want the following:
- The refresh token can only be used once; on refresh, a new refresh token is issued
- The new refresh token has an updated expiration of "Refresh Token duration" instead of the former refresh token's expiration
I'm using:
Refresh Token expiration: Sliding window
Refresh Token usage: One time use
Would those be the correct settings?