Since role gets sent along with access and refresh token, changes in permissions won't be reflected if the front-end stores it early on when receiving the tokens for the first time. Instead we can maybe send it by embedding into the payload of the access token itself so that role updates are reflected accordingly.
Since role gets sent along with access and refresh token, changes in permissions won't be reflected if the front-end stores it early on when receiving the tokens for the first time. Instead we can maybe send it by embedding into the payload of the access token itself so that role updates are reflected accordingly.