Keep Users Authenticated For Longer Than 1 Hour #19
Description
Currently, users are authenticated for only 1 hour. This is because the ID token lasts only 1 hour, and when an API call is made to fetch user information, if the ID token is expired, it logs out the user. However, this can be changed by instead using the ID Token, even if it is expired, to simply query the database and find the appropriate refresh token for the user. The refresh token can then be used to get other tokens, such as an updated id token and access token.