AppSessionToken

A short-lived token an app extension sends to its own server to prove who is looking at what. It is not an ARC credential.

type AppSessionToken {
  expiresAt: DateTime!
  token: String!
}

Fields

AppSessionToken.expiresAt ● DateTime! non-null scalar

When the token expires.

AppSessionToken.token ● String! non-null scalar

The JWT, signed HS256 with the app's client secret. Valid for 60 seconds.

Returned By

appSessionToken query