The access and refresh token cause and need.
A developer building authentication system should primarily focus on the security and user experience-here comes the jwt tokens/jsonwebtokens which fits perfectly on these criteria. Don't worry you don't have to be a tech geek to understand them!Think of them as Id cards of a office, when the date of Id(access tokens) expires and it is no longer valid we use the new Id(refresh token) sent back to us by the office.

