Skip to main content

Understanding the Functioning of Tokens and Refresh Tokens

This article explains how Edusign secures your session and keeps your connection active through access tokens (tokens) and renewal tokens (refresh tokens). 🔐

Written by Maxime Alaphilippe

Edusign uses a Token (valid for 8 hours) to authorize your actions and a Refresh Token (valid for 4 weeks) to renew your connection automatically without having to re-enter your credentials.

🌐 The Token: Your Temporary Access Proof

Lorsque vous vous connectez Ă  l'application Edusign, le systĂšme vous dĂ©livre un Token (jeton d'accĂšs). Ce jeton agit comme un badge numĂ©rique prouvant que vous ĂȘtes autorisĂ© Ă  accĂ©der Ă  votre compte.

  • Validity Duration: 8 hours.

  • SĂ©curitĂ© : L'expiration automatique limite les risques d'accĂšs non autorisĂ© si votre session est compromise.
    ​

♻ The Refresh Token: For Seamless Connection

To save you from having to manually reconnect every 8 hours, Edusign uses a Refresh Token (renewal token).

  1. Functioning: When the Token expires, the Refresh Token automatically generates a new access token in the background, without interrupting your navigation.

  2. Validity Duration: 4 weeks

  3. Storage: It is stored securely on your device.

Do not confuse the Token (immediate and short access) with the Refresh Token (long-term renewal key)! ⏱

🔒 Enhance Security with Biometrics

You can enhance the protection of your Refresh Token by enabling biometrics in your app's settings.

  • Use: Once enabled, using the renewal key will require your fingerprint or Face ID.

  • Avantage : MĂȘme si votre tĂ©lĂ©phone est dĂ©verrouillĂ©, personne d'autre que vous ne pourra renouveler la session de l'application !
    ​

To learn more, visit our help center.

💬 If you don't find what you're looking for, contact us via chat. 💬

Did this answer your question?