Essential Security Cookies
Our SSO service uses strictly essential cookies required for authentication, session security, and interface operation. We do not use third-party advertising or tracking cookies.
| Cookie Name | Purpose | Duration |
|---|---|---|
| sso_access_token | Short-lived encrypted JWT session authentication token (HttpOnly, Secure). | 15 minutes |
| sso_refresh_token | Rotational token to securely refresh user session (HttpOnly, Secure, SameSite). | 7 days |
| XSRF-TOKEN | Cross-Site Request Forgery protection cookie matching refresh rotation. | 7 days |
| sso_theme / sso_lang | Stores your theme (Auto, Light, Dark) and language locale preference. | 1 year |