ServiceActive

Descope Session Management

JWT-based session management with short-lived session tokens and longer-lived refresh tokens for web and mobile apps.

Open source page ↗

Field note

What it does

Manages authenticated user sessions using signed JWT pairs: session tokens for API requests and refresh tokens for silent renewal. Supports HttpOnly cookies, secure mobile storage, configurable timeouts, and server-side revocation.

Capabilities

Available capabilities

SSO Session ManagementToken IntrospectionServer-side RevocationJWT Session TokensRefresh Token RotationStep-up Authentication

Tags

Tags

AuthenticationJWTSession Management

Ways to use it

Ways to use it

sdk

javascript / https://docs.descope.com/sessions

sdk

Not filed / https://docs.descope.com/sessions

sdk

Not filed / https://docs.descope.com/sessions

Product features

Product features

Agentic Identity Hub

Agentic Identity Hub Overview

Connect Agents to External Services

Core Components

Govern the Agents You Run

How Agents Get Access

Open Your Product to Agents

Resources and Connections

The working model

Use Cases

Where Descope Fits

Why Agents Need Different Identity Infrastructure