# Auth

Authentication uses JWT tokens minted by the auth service. Refresh tokens live in the sessions table for 30 days.


# Update May 3
Auth now also supports OAuth2 device flow for CLI clients.