I am developing a mobile application back-end service using Laravel 5.3. I am following REST API. Application having payment gateway integration and it needs more security.
I followed JWT auth by using the tymon/jwt-auth
library for laravel.
I have few concerns: my token getting expired after 1 hour, after that server returning token expired error; and how can the app developer handle this situation? Asking user to log in again and again, is not possible.
How can app developer handle it?
What is the best and more secure approach?