We employ JSON Web Tokens (JWT) for authentication, a single token is valid for one year. Once expired, a token must be renewed.