JWT Session Management and Token Rotation for Private Organizations

I am experiencing a critical issue where the JWT provided during SDK initialization appears to be permanently bound to the session.

This causes 401 Unauthorized errors when the JWT expires, even if I attempt to update it mid-session.

This limitation makes the Feedback widget unusable with expiring JWTs when using Private Organizations and JWT-based SSO.

I would like the SDK to introduce functionality to allow JWT rotation at runtime (e.g., `Featurebase('setToken', '<new-token>')) or to renew the session without requiring a full SDK reinitialization.

My goal is to securely use Private Organizations and JWT-based SSO with an expiring JWT.

Post type
πŸ’‘ New feature
What part?
Widget

Please authenticate to join the conversation.

Upvoters
Status

Planned

Board

Feedback & Roadmaps

Date

8 months ago

Author

Jared Scheib

Subscribe to post

Get notified by email when there are changes.