Authentication tokens are not valid on page refresh
Authentication tokens issue on page refresh.
Expected
If user's refresh token is valid, no matter if the authToken is are even exists, refreshing the page should generate a new pair of token and revoke the previous refreshToken. The user stays connected to his/her session.
Actual
When the user refreshes the page, both tokens are cleared after passing the sign in page, causing a critical bug.
Edited by Bryan M. Ramsamy