Mobile inspectors remain in the field for hours; access tokens expi…

Question

Mobile inspectors remain in the field for hours; access tokens expire and uploads begin failing silently. What should the client implement?

Accepted Answer

Handle access-token expiry with a secure refresh-token flow (or re-auth) so uploads resume without storing long-term AWS keys in the app. — Field tablets need a refresh handshake when the access token times out—like renewing a parking permit mid-shift. Do not bake IAM keys into the app or pretend expiry never happens. Silent retries with a dead token just fill the logs with ghosts.

Answer

Disable token expiry in Cognito permanently for all citizen and staff apps.

Answer

Embed a long-term IAM access key in the mobile app binary for uploads.

Answer

Ignore 401 responses and retry the same expired access token indefinitely.

Mobile inspectors remain in the field for hours; access tokens expire and uploads begin failing silently. What should the client implement?

Short Explanation

Full Explanation