title: does firebase custom authentication require that you manage refresh tokens for web clients?
body: <p>For firebase, I'm using custom authentication because our organization uses CAS for single sign on.</p>
  
  <p>Does custom authentication handle refresh jwt tokens automatically or would I need to develop a refresh workflow within my app?</p>
  
  <p>I am not creating custom tokens using a third party library.  My token is created via <code>var token = firebase.auth().createCustomToken(uid, additionalClaims)</code> as described on <a href="https://firebase.google.com/docs/auth/server/create-custom-tokens" rel="nofollow">https://firebase.google.com/docs/auth/server/create-custom-tokens</a>.  But this page doesn't mention anything about refresh tokens.</p>
  
  <p>My clients are mainly web, and I've found notes that if you use the Android SDK, this refresh happens automatically.  But I'm unsure about refresh tokens and web clients for custom authentications.</p>