Each time a refresh token is used to generate a new JWT token (via the/users/refresh-tokenroute), the refresh token is revoked and replaced by a new refresh token. This technique is known asRefresh Token Rotationand increases security by reducing the lifetime of refresh tokens, which makes ...