I have a short lived(both 20 mins) access token and refresh token and I want to store it in a session as below and will use it any where if required.
session.setAttribute(ApplicationConstants.OKTA_RESPONSE,token);
Please let me know whether this is correct approach or not.
If not please suggest a link or document where in I can refer.
Thanks in advance.