Glossary · Security
Session token
The short-lived token presented to the marketplace API on each request.
A session token is the credential Robnu presents to the marketplace API to do work on your behalf — fetch orders, upload confirmations, generate manifests. It's short-lived (typically 15 minutes to 1 hour, depending on the marketplace) and gets refreshed silently.
Session tokens are the most-frequently-used credential in the system. They're also the lowest-stakes individually — even if one leaks, it expires fast.
Robnu's session JWT is a separate concept — that's the token Robnu issues to YOU when you log in to the dashboard. Don't conflate the two.