Glossary: Web App Security and Authentication

Refresh token

A long-lived token kept safe and used only to get new short-lived access tokens. Replacing it on each use makes a stolen copy stop working.