I am writing an Android application that consumes the drupal 8 REST features. I have managed to write REST resources and make api calls with the android app to these resources with succes.
My question is about the login and sessions. When the users logs in for the first time we get a X-CSRF-Token, this token has an expiration date. I also use this token to authenticate myself when making calls to the REST resources.
Does Drupal has a REST feature that refreshes the token without having to enter the user credentials again?
The idea is to have an app on which you log in only once until the users logs out manually.