Understanding the concept of Refresh & Access Token

In modern web development, security and user experience often seem at odds. You want your users to stay logged in for weeks (User Experience), but you also want to ensure that if their credentials are stolen, an attacker can't do damage forever (Secu...