Every few days I receive a 401 (Unauthorized) when calling the API

[byteloser]

I am sure this is something I am doing wrong and hope some of you might be able to push me in the right direction.

I used the template for a small app and it works great, but it seems every few days all users receive the 401 when accessing the API (the controller has the Authorize attribute).

The client-side login works and I check on the client if the user is authenticated before accessing the API.

I changed storing the key to the file system to see the expiration date, which is 90 days from the day of creation, so it isn't expired yet.

The only way I get the app to work again is by deleting the key file on the server and re-start the application pool.

I assume this has to do with expired tokens.

I am fairly new to angular and SPA development and hope some of you might have an idea.

Thanks!
Stephan