Authentication, Sessions & JWT Architecture
Understanding secure session handling and authentication mechanics across platform endpoints.
ePaisay utilizes modern cryptographic session management combining secure HTTP-only cookies and signed JWT tokens.
Core Architecture & Principles
- Stateless JWT Tokens: Cryptographically signed JSON Web Tokens for high-speed API authorization and routing.
- Session Expiration & Heartbeats: Automatic session expiration after inactivity, protected by periodic heartbeat verification.
- Remote Session Kill Switch: View all active logins and terminate unfamiliar or stale browser sessions with one click.
Operational Process & Execution Flow
Session Inspection
Navigate to Account Settings > Security to view active IP addresses, browsers, and login times.
Revoke Single Session
Click 'Terminate' on any specific device entry to immediately invalidate its session token.
Universal Logout
Use 'Log Out of All Devices' to reset authentication states across all browsers and mobile apps.
Security Notice
Session tokens are strictly bound to original browser fingerprints and IP ranges to prevent token hijacking and replay attacks.