Yes, focus on #3, if we sent request and got error then in exception handler we need to re-authenticate (using user/password) and save new token for consequent requests, after that re-sent failed request with this token.
Yes, focus on #3, if we sent request and got error then in exception handler we need to re-authenticate (using user/password) and save new token for consequent requests, after that re-sent failed request with this token.