Re: [keycloak-user] Clarification of use case: simultaneous requests with expired token

On 11.12.2014 23:20, Kuznetsov, Mike wrote: Your web client is servlet application secured by keycloak? Actually it's the frontend application, which handles refreshing of tokens. You can take a look at our example, where frontend application is sending rest requests to backend application: https://github.com/keycloak/keycloak/blob/master/examples/demo-template/c... . In this case when the code is calling: session.getTokenString() the adapter will automatically handle refreshing the token (it checks if token is expired and automatically refresh if it is). So later you can use this accessToken to send parallel requests to your REST endpoints and it should be ok to assume that accessToken is not expired. Marek