After a user signs in, 36Blocks gives your app a session token (proxy_auth_token) and a refresh token. This section explains how to use them.

Session & Authorization

The two ways to represent a session on your backend: token-only or JWT.

Refresh Tokens

Keep a user signed in by exchanging a refresh token for a new session.

Redirect Parameters

What 36Blocks adds to your redirect URL after login, and how to redirect somewhere else.