I am going to implement a new full-stack app using Adonis (node.js) for back-end and Vue for front-end.
Since there is a mobile app as well, I thought to implement the back-end stack as an API server, and keep all three blocks (back-end, front-end and mobile) as three stand-alone repositories.

One of the consequences is that I will have to implement an access-token authentication.
I want to keep the application safe, which means I will need to refresh token quite often.
On the other hand I want user to stay logged-in even if he closes browser and goes away.

I never used access-tokens and JWT before, is it possible to have both security and user comfortability?