Logged out after an hour
Users fill in a long form, press Save, and get 'Unauthorized'. It always happens about an hour after they signed in.
This answers: Why do my users get logged out after an hour? No coding needed. 2 quick decisions.
- Who is signed in
- Debugging without panic
Checking your access…
Why do my users get logged out after an hour?
Access tokens are short-lived, often about an hour, and must be renewed with a . If nothing refreshes the session before requests, especially on server-rendered pages that cannot set , users see 'Unauthorized'. Refresh the session in code that runs before each request.
Breaks at Your server: Expired token never refreshed
How it works
A sign-in, ninety minutes laterRefresh the token
Sign inToken expires 60 minSave at 75: 401
Why AI tools write this bug
Generated auth setups work in a short demo session. Token refresh only matters after an hour, so it is easy to miss.
How to fix it
- Check logs for ' expired' at the failing request.
3 more steps, and a prompt that checks your own app for this bug. Part of Pro.
UnlockCommon questions
- Should I make tokens last longer?
- No. A stolen long-lived token stays useful for longer. Short tokens with automatic refresh are safer.