Skip to main content

Understanding the Functioning of Tokens and Refresh Tokens

This article explains how Edusign secures your session and keeps your connection active through access tokens (tokens) and renewal tokens (refresh tokens). ๐Ÿ”

Written by Elliot Boucher

Edusign uses a Token (valid for 8 hours) to authorize your actions and a Refresh Token (valid for 4 weeks) to renew your connection automatically without having to re-enter your credentials.


๐ŸŒ The Token: Your Temporary Access Proof

When you log into the Edusign application, the system issues you a Token (access token). This token acts as a digital badge proving you are authorized to access your account.

  • Validity Duration: 8 hours.

  • Security: Automatic expiration limits the risk of unauthorized access if your session is compromised.
    โ€‹

โ™ป๏ธ The Refresh Token: For Seamless Connection

To save you from having to manually reconnect every 8 hours, Edusign uses a Refresh Token (renewal token).

  1. Functioning: When the Token expires, the Refresh Token automatically generates a new access token in the background, without interrupting your navigation.

  2. Validity Duration: 4 weeks

  3. Storage: It is stored securely on your device.

Do not confuse the Token (immediate and short access) with the Refresh Token (long-term renewal key)! โฑ๏ธ

๐Ÿ”’ Enhance Security with Biometrics

You can enhance the protection of your Refresh Token by enabling biometrics in your app's settings.

  • Use: Once enabled, using the renewal key will require your fingerprint or Face ID.

  • Advantage: Even if your phone is unlocked, no one but you will be able to refresh the app's session!
    โ€‹


For further information, visit our help center.

๐Ÿ’ฌ If you don't find what you're looking for, contact us via chat. ๐Ÿ’ฌ

Did this answer your question?