Auth0 ORT Demo

Session-bound refresh token ( online refresh token)

This application requests online_access, stores the ORT on the server, and keeps renewing the short-lived API token until the Auth0 session is revoked.

Session actions

Login with Auth0 Logout

Signed in user

Not signed in

Login to begin the flow.

Access token

-

Short-lived token for the Expenses API.

Online refresh token

-

Bound to the Auth0 session.

Refresh count

0

No refreshes yet.

Flow

The current access token remains valid until expiry. Once the ORT is revoked, the next refresh attempt should fail and the user must authenticate again. 

API response appears here.

Trace

Recent server events

Latest first