Manage your sign-in session
Understand session expiration and sign-out.
Session cookies
The app uses HttpOnly access and refresh cookies. Production deployments should serve HTTPS and use secure cookie configuration. Token lifetimes come from deployment configuration, not from a universal fixed period.
When a session expires
The app can attempt one coordinated refresh and retry. If the session is refused, sign in again. Repeated refresh failures should be reported with the time and deployment URL, without including cookie values.
Use a shared device carefully
Sign out after using a shared device and close the browser session. Workspace administrators can suspend membership; live access checks can deny a session when account or membership authority is no longer valid.
Was this article helpful?
Still need help?
Send a private request or contact support@cofolders.com.