How can set no expiration for Auth?

Japineda16

2 months ago

6

• 

  jarrod_not_jared

  Payload Team

  2 months ago

  Would an api-key work better for you? Cookies have a hard limit of 400 days mandated by the browser. You could enable api-keys on your user collection and then use an api-key authenticate with infinitely. Here’s some more info about them:

  https://payloadcms.com/docs/authentication/config#api-keys
• 

  Japineda16

  2 months ago

  There's not exist someway to use jwt?

• 

  jarrod_not_jared

  Payload Team

  2 months ago

  You can also use JWT yeah!

  
  

  
  

  Authorization: JWT your-token-here

• 

  Japineda16

  2 months ago

  Yes but using JWT passing by Authorization, keeps expiring

  
  

  
  

  There's exist some way to avoid JWT expiration?

• 

  paulpopus

  2 months ago

  Not really, the intention of JWTs and this kind of "temporary token authorisation" is the fact that they expire, what you're really looking for is the API key linked above, that is also going to have the behaviour you want of not expiring.

  
  

  Any other solution to get JWTs to behave like an API key would just be hacky and not recommended

• 

  seanzubrickas

  Payload Team

  last month

  Hey @Japineda16 do you have any follow up questions here? If not I'll close this one out. Thanks!