1. When the user logs in successfully, a token, is issued to set the expiration time, which is assumed to be 2 hours.
2. When the user is more than 30 minutes from the expiration time, the user carries the original token access interface, and the original token, is still valid if the new token is not issued.
3. When the user is less than 30 minutes from the expiration time, but does not expire, and the user carries the original token access interface, the original token of the new token, becomes invalid.
4. When the user"s token has expired, issue a new token directly.
this gives users half an hour of no-operation judgment, which is somewhat similar to the previous session. What I want to ask is, is there any drawback to this?