Security

Refresh Token Rotation

Issuing a new refresh token on each use and invalidating the old one; reuse of a spent token signals theft.

Why interviewers ask about it

The standard mitigation for the JWT revocation problem. Reuse detection lets you revoke an entire token family immediately.

This term is part of the free System Design interview preparation module - browse the full glossary for every definition.