- URL: https://completion.amazon.com/api/2017/
- Resource: suggestions
- Paramters:
- session-id: 133-2190809-5709766
- customer-id: A1CNYR04B8CZOZ
- request-id: NTH41W0H5GYC8N00NVCS
- page-type: Gateway
- lop=en_US
- site-variant=desktop
- client-info=amazon-search-ui
First of all, please note that token expiration and revoking are two different things.
- Expiration only happens for web apps, not for native mobile apps, because native apps never expire.
- Revoking only happens when (1) uses click the logout button on the website or native Apps;(2) users reset their passwords; (3) users revoke their tokens explicitly in the administration panel.
A JWT token that never expires is dangerous if the token is stolen then someone can always access the user's data.
Quoted from JWT RFC: