Can / should I refresh an OAuth2 token with every request in spring security
问题 We use the username-password grant to connect our JS client to our REST server. In a way the token returned by oauth/token is our session, as it allows access to the backend for a limited time. We would like to refresh that session/token every time we make a request to the backend using the token. I know there is this refresh token issued by the server and I could use it to refresh my token after it has expired. The thing is: I don't want to make it the client responsiblity to catch token