Rank 2: Process
Now, I'm doing a task manager project like Trello so it is natural that the user should be kept until he manually logs out from the app. How can I keep the user authenticated until log out?
- if I use
ApiKeyit gets other users' data - if I use
JWThas a fixed 15-minute limit (and there is no feature likerefresh token)
Is there any best practice?