I really dont think allowing for clients to specify a token duration to the server fixes the problem at all. Unless short token durations were in actuality long time spans.
I really dont think allowing for clients to specify a token duration to the server fixes the problem at all. Unless short token durations were in actuality long time spans.