Authentication token refresh

[tusmester]

The client is capable of using an access token, but there is no mechanism for refreshing the access token using the refresh token, if the client is used for a long period of time - e.g. from a web application.

Define a background worker (?) for checking token expiration and refreshing the access token when necessary.

Proposal

We need a token storage that can be used in a web server environment. It should be a black box that handles token refresh operations in the background.

• automatic token refresh
• manage tokens by server url (handle multiple servers at the same time)
• the storage can be put into the usual .Net dependency injection container
  • optionally add helper methods for accessing the container
• async API