# Session Lifecycle Worksheet

- token type:
- issue trigger:
- refresh trigger:
- expiry rule:
- revocation trigger:
- re-authentication trigger:

## Questions

- what happens across devices or tabs?
- how are session changes communicated to the user?
- which events must invalidate current sessions immediately?