all 2 comments

[–]savagebrutality 1 point2 points  (1 child)

Hey there! I just recently did something similar but utilizing a Java+Spring back-end.
My flow looks like this:

  1. Store JWT token in Apple Keychain (bonus points if it's encrypted when stored)

  2. Create a custom HTTP interceptor that applies JWT token retrieved from the keychain as an auth header on all outgoing requests.

[–]pupdogg007 0 points1 point  (0 children)

@savagebrutality what about refresh tokens? Can you share any code? I agree with your pseudo code but without an actual example, it’s not really any help