Authentication

How auth works across the web app, API, and docs connect.

Web app sessions

The web app uses cookie-based authentication (access + refresh token rotation).

Docs connect

The docs site can optionally “connect” a logged-in user via /docs/connect and a short-lived bearer token.