Back to Documents Catalog
AuthenticationConflictPublishedVer: v3.0.1
JWT Authentication & Security Policy
ID: doc-auth-jwt-policyLast Updated: 9/10/2026, 11:00:00 AM
AI Content Consistency Analysis
Scan "JWT Authentication & Security Policy" against related Sanity documentation for contradictions, staleness, and ambiguous claims.
Potential Issues & Consistency Flags
Contradictory Claim Detected: Mismatch in Authentication Token Expiration Time
Security Policy states JWT tokens expire after 15 minutes of inactivity, but the User Authentication FAQ informs end users that session tokens remain valid for 24 hours. This leads to user session dropouts and security misunderstandings.
Pending Review Workflow: Review Token Expiration Inconsistency
Pending Review"Need SecOps to clarify if short-lived 15m JWT tokens apply to both API and Web dashboard sessions." — Alex Rivera (Security Lead)
Document Body Content
JWT authentication tokens expire after 15 minutes of inactivity for maximum protection. Clients must send a refresh token request to obtain a fresh access token before expiration.
Document Metadata
Health IndicatorConflict
Slug/jwt-authentication-security-policy
CategoryAuthentication
StatusPublished
Versionv3.0.1
Last Updated9/10/2026