Scheduled maintenanceScheduled maintenance: PayWise infrastructure maintenance is planned from Friday, October 9 at 7:00 p.m. ET through Monday, October 12 at 8:00 a.m. ET. Sandbox and Production services may experience intermittent interruptions during this period. Existing PayWise service URLs and SFTP hostnames will remain unchanged.
Skip to main content

Tokens

Tokens​

After successful sign-in, Identity issues:

  • id_token
  • access_token
  • refresh_token

ELI5: what this means​

Think of these as three different passes:

  • id_token: your name badge ("who am I?").
  • access_token: your short-lived door pass ("can I access this now?").
  • refresh_token: your renewal slip ("give me a new door pass without signing in again").

If you lose any of them, treat it like losing a key card.

Handling guidance​

  • Treat all tokens as secrets.
  • Keep refresh tokens in secure storage only.
  • Use short access-token TTL with refresh.