Back to gallery
Session & tokens
Inspect the access token, validate it, and rotate with refresh.
Live
auth.validate / auth.refresh token calls
No output yet — run the demo above.
The ring counts down the access token's expires_in. Each refresh() is a real rotation — a new access + refresh pair,
and the previous refresh token is single-use.