title: Is it viable to refresh Auth Token on every request?
body: <p>Does it make sense in a general case for a web API service to send a newly generated token on each request user makes so that client app must use for the next request?</p>
  
  <p>I am thinking of the way to make tokens expiring, but if client app is consuming the data from the API, not require it to sign in again.</p>
  
  <p>I think it's quite easy to implement but not sure if there could be UX or logic/security issues with it.</p>