title: Time expiration issue in JWT
body: <p>As you know, there are some good reasons for using <strong>token based authentication</strong> instead of session based.</p>
  
  <p>In session based, of course there is a expiration time. So if user is not active for a while, his session get expired. But before expiring, if he send request to server, his time will be extended.</p>
  
  <p>There is an awesome tutorial <a href="https://www.sitepoint.com/php-authorization-jwt-json-web-tokens/" rel="noreferrer">here</a> about <code>JWT</code>. I have a question about <strong>expiration time for token</strong>. Imagine we set the expiration time to 100 seconds, then we sign the token. It doesn't matter user is active or not. After 100 seconds <strong>that token will not be valid anymore</strong>. This bothers the user. Is there any way to extend the time?</p>
  
  <p>Is it a true approach, or maybe I have a mistake. Any idea?</p>