Access vs Refresh Tokens: I Was Missing Two Ideas

Years ago I was building a login API, and a colleague looked at what I was returning and asked why I only had one token. He said the newer APIs hand back two, an access token and a refresh token. Mine