Sessions and signing out
How long you stay signed in, why you might be asked to sign in again, and what happens when access is removed.
How long you stay signed in
- In the browser, your session lasts 12 hours.
- Behind the scenes, AssetTrove uses short-lived access tokens (15 minutes) that renew automatically for up to 7 days, or until you've been inactive for 12 hours.
You don't need to do anything for renewal; it happens silently while you work.
Why you might be signed out early
| Reason | What happened |
|---|---|
| Your account was deactivated | All your sessions end at once, in the same moment the account is deactivated |
| SSO became required | Password sessions of everyone except the person who turned it on end immediately |
| A stolen session was detected | Each renewal token works once. If an old one is used again, AssetTrove assumes it was copied, ends the whole session and records a critical audit event |
| Signing keys were rotated | Rarely, during maintenance, everyone is asked to sign in again |
When your access changes
If your roles change, or you're removed from a group that gave you a role, the change applies on your next action. AssetTrove notices your permissions changed and refreshes your session, so old permissions never linger.
Still have a question? Email rory@assettrove.eu and we'll get back to you.