Platform Sessions

Understand how spektr keeps your session active, when it asks you to refresh it and what happens when the session expires.

#How sessions work

#Access and ID tokens

Access and ID tokens are short-lived. They prove your identity on each request made while you use the platform.

#Refresh token

The refresh token lasts 30 days and is used to obtain new access and ID tokens without asking you to sign in again. When the refresh token also expires, you must sign in again with your credentials.

#There is no idle timeout

spektr does not lock your session simply because you have stopped interacting with the platform. A session ends because its tokens expire, not because a fixed inactivity period has elapsed.

Leaving a page open without using it can still lead to the session-expiry reminder because there are fewer requests available to trigger a silent refresh.

#How the session is refreshed

Two independent mechanisms can keep your session available.

#1. Silent refresh while you work

1. Before an API request, spektr checks the access token.
2. If the token is missing, expired or within about 30 seconds of expiry, spektr uses the refresh token to obtain a new token.
3. The request continues without opening a dialog or interrupting your work.

The app also checks session expiry every 30 seconds. The expiry reminder normally appears about five minutes before expiry. These checks are separate from the safety margin used when obtaining a token for an API request.

#2. Session refresh dialog

You may see a reminder when your session is about to expire:

• Select Refresh session to request a session refresh.
• Select No to dismiss the reminder for the current session without requesting a refresh through the dialog. This does not sign you out. If the session expires without a successful refresh, you must sign in again.
• If the session expires without a successful refresh, sign in again to continue.

#When the session has ended

When the session expires, spektr shows the Sign in to your account page with:

• Email
• Password
• Sign in
• Go back
• Forgot password?

Sign in again to continue. spektr keeps the page you were on and takes you back to it after successful sign-in.

#Sign out manually

1. Click your name at the bottom of the left-hand menu.
2. Select Sign out at the bottom of the menu.

Other open tabs may require you to sign in again on their next request; the sign-in screen does not necessarily appear in every tab at the same instant.

#What else is in the account menu?

The same workspace menu lets you:

• Switch between the Live, Sandbox and Test environments.
• Open Settings.
• Open the documentation, Help Center and release notes.
• Sign out of the current session.

#Inactivity and expiry

---

#Related guides

• internal page — access your workspace and configure two-factor authentication.
• internal page — find the account menu, Settings and help resources.
• internal page — understand Live, Sandbox and Test and how to switch between them.