DeepFrontend
Learning Paths
Practice
System Design & DS
Design Studio
Data Structures Curriculum
Real-World Case Studies
Careers
Job Board
Resume Builder
Blog
Sign in
Search
⌘K
Go Pro
Loading compiler resources...
API Development Quiz Practice
Active Recall Drill Session
← Exit Session
Question 1 of 1
hard
API Development
Why does a SHORT access-token lifetime matter even though the refresh token is the one that's actually revocable?
A
Access token lifetime has no security relevance at all
B
It bounds the damage window of a LEAKED access token specifically — since the access token itself is stateless and NOT revocable, a short lifetime is the only real limit on how long a leaked one stays usable
C
Short access tokens make the refresh token unnecessary
D
This only matters for session cookies, not tokens
Check Answer