JWT Authentication

• Short-lived access tokens (30 minutes) paired with rotating refresh tokens (7 days)
• Bearer-token authentication is required on every protected endpoint
• Dedicated login, refresh, and logout endpoints give full control over the session lifecycle

← Back to all features

Full technical documentation →