# Session\_Token lifetime

**URL:** <https://discuss.blues.com/t/session-token-lifetime/167>\
**Category:** Notehub.io\
**Created:** [March 16, 2021, 4:11pm UTC](https://discuss.blues.com/t/session-token-lifetime/167 "2021-03-16T16:11:00Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![Pat](https://sea2.discourse-cdn.com/flex020/user_avatar/discuss.blues.com/pat/32/143_2.png) [@Pat](https://discuss.blues.com/u/Pat)\
**Post date:** [March 16, 2021, 4:11pm UTC](https://discuss.blues.com/t/session-token-lifetime/167/1 "2021-03-16T16:11:00Z")

</div>

What is the Lifetime of a session\_token?

Thanks

---

<div class="post-metadata">

**Author:** ![gwolff](https://avatars.discourse-cdn.com/v4/letter/g/a88e57/32.png) [@gwolff](https://discuss.blues.com/u/gwolff)\
**Post date:** [March 17, 2021, 6:00pm UTC](https://discuss.blues.com/t/session-token-lifetime/167/2 "2021-03-17T18:00:00Z")

</div>

Good question.

Currently session tokens have a long lifetime of 10 years. ⏳

---

<div class="post-metadata">

**Author:** ![Pat](https://sea2.discourse-cdn.com/flex020/user_avatar/discuss.blues.com/pat/32/143_2.png) [@Pat](https://discuss.blues.com/u/Pat)\
**Post date:** [March 17, 2021, 9:15pm UTC](https://discuss.blues.com/t/session-token-lifetime/167/3 "2021-03-17T21:15:27Z")

</div>

Thank you @gwolff.

Follow up question. Is there a limit on how many concurrent session\_tokens that a single Project UID can have? i.e by multiple devices running mobile apps that access Notehub API.

---

<div class="post-metadata">

**Author:** ![gwolff](https://avatars.discourse-cdn.com/v4/letter/g/a88e57/32.png) [@gwolff](https://discuss.blues.com/u/gwolff)\
**Post date:** [March 18, 2021, 4:24pm UTC](https://discuss.blues.com/t/session-token-lifetime/167/4 "2021-03-18T16:24:42Z")

</div>

There is no limit that we are aware of.

---

<div class="post-metadata">

**Author:** ![Pat](https://sea2.discourse-cdn.com/flex020/user_avatar/discuss.blues.com/pat/32/143_2.png) [@Pat](https://discuss.blues.com/u/Pat)\
**Post date:** [March 18, 2021, 4:27pm UTC](https://discuss.blues.com/t/session-token-lifetime/167/5 "2021-03-18T16:27:04Z")

</div>

Thanks @gwolff . I was hoping that to be the case.

---

<div class="post-metadata">

**Author:** ![barcesat](https://avatars.discourse-cdn.com/v4/letter/b/d9b06d/32.png) [@barcesat](https://discuss.blues.com/u/barcesat)\
**Post date:** [January 31, 2023, 1:06pm UTC](https://discuss.blues.com/t/session-token-lifetime/167/6 "2023-01-31T13:06:19Z")

</div>

Hi, I have a followup question and clarification. Is the token life is still 10 years?

---

<div class="post-metadata">

**Author:** ![RobLauer](https://sea2.discourse-cdn.com/flex020/user_avatar/discuss.blues.com/roblauer/32/1567_2.png) [@RobLauer](https://discuss.blues.com/u/RobLauer)\
**Post date:** [January 31, 2023, 2:30pm UTC](https://discuss.blues.com/t/session-token-lifetime/167/7 "2023-01-31T14:30:05Z")

</div>

Hi @barcesat,

Yes, however, we are soon going to be deprecating the session token method for Notehub API authentication in favor of an OAuth workflow. This doesn’t mean session tokens will stop working, but we highly recommend people switch over to OAuth as soon as it is ready (I’m guessing in the next month or so).

Thanks,  
Rob