I have actually written a react auth flow recently in a project I'm working on just like this. You can also use the axios interceptor to use refresh tokens to keep refreshing the access token.