From 656d7eac1f2f98c639e12c94305276512b2280cc Mon Sep 17 00:00:00 2001 From: Claude Date: Wed, 12 Aug 2026 06:43:48 +0530 Subject: [PATCH] docs(auth): clarify JWT session expiry --- src/routes/docs/products/auth/jwt/+page.markdoc | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/src/routes/docs/products/auth/jwt/+page.markdoc b/src/routes/docs/products/auth/jwt/+page.markdoc index 4bd66cc6cf5..e8f08a5f156 100644 --- a/src/routes/docs/products/auth/jwt/+page.markdoc +++ b/src/routes/docs/products/auth/jwt/+page.markdoc @@ -18,7 +18,7 @@ When you build backend APIs to extend Appwrite's functionality, these APIs shoul [JSON Web Tokens](https://jwt.io/introduction) (JWTs) are a secure means to transfer information or claims between two parties. JWTs act like temporary copies of the user's ID card that allow Appwrite's Server SDKs to access information on behalf of a user. -You need to create a session using the Client SDKs **before** generating a JWT. The JWT will be a stateless proof of claim for the identity of the authenticated user and expire after 15 minutes or when the session is deleted. +You need to create a session using the Client SDKs **before** generating a JWT. The JWT is a stateless proof of claim for the identity of the authenticated user and expires after 15 minutes. It also becomes invalid if the session it was created from expires or is deleted. You can generate a JWT like this on a [Client SDK](/docs/sdks#client). @@ -547,4 +547,4 @@ This will return every row regardless of permissions, which could lead to privac } ``` -If you're integrating existing backend services with Appwrite or adding backend endpoints to perform more complex logic, JWT authentication helps them behave similarly to actual Appwrite endpoints. \ No newline at end of file +If you're integrating existing backend services with Appwrite or adding backend endpoints to perform more complex logic, JWT authentication helps them behave similarly to actual Appwrite endpoints.