How long do user sessions last?
Session tokens last 365 days by default. You can renew a token before it expires with any duration you choose, and calling the logout endpoint invalidates it immediately. Tokens are cryptographically signed and opaque — they can only be validated or invalidated by Forte.