After obtaining a refresh and access token, how do I verify the SSO/Session for the user to make sure they are still “logged in”?
-
After obtaining a refresh and access token, how do I verify the SSO/Session for the user to make sure they are still “logged in”?
-
The FusionAuth SSO enabled through an OAuth2 code grant handles the user session validation.
-However-
The Login API (
/api/login) does not use FusionAuth SSO. In this scenario, the user session is managed in your own application (more customization possible, but likely more code work).
