Skip to main content

JWT Session Management and Token Rotation for Private Organizations

I am experiencing a critical issue where the JWT provided during SDK initialization appears to be permanently bound to the session.

This causes 401 Unauthorized errors when the JWT expires, even if I attempt to update it mid-session.

This limitation makes the Feedback widget unusable with expiring JWTs when using Private Organizations and JWT-based SSO.

I would like the SDK to introduce functionality to allow JWT rotation at runtime (e.g., `Featurebase('setToken', '')) or to renew the session without requiring a full SDK reinitialization.

My goal is to securely use Private Organizations and JWT-based SSO with an expiring JWT.

Status: Next

Log in to comment and vote

No comments yet

Be the first to share your thoughts.