​
Understanding JWT Tokens

When users authenticate through Authiqa, they receive a JWT token that contains:
  • User ID
  • Email
  • Account Type (parent/child)
  • public Key
  • Parent Account (for child accounts)

​
Token Storage

The widget automatically handles token storage: 
// Tokens are automatically stored in localStorage
- authiqa_token           // Main authentication token
- authiqa_token_expiration  // Token expiration timestamp
- userId                    // User's unique identifier

​
Token Verification

​
Parent Accounts

// Check if token exists
const token = localStorage.getItem('authiqa_token');
if (!token) {
  // Redirect to login
  window.location.href = '/login';
}

​
Child Accounts

// For child accounts, also verify parent relationship
const token = localStorage.getItem('authiqa_token');
const parentSecret = localStorage.getItem('authiqa_parent_jwt_secret');

if (!token || !parentSecret) {
  // Redirect to login
  window.location.href = '/login';
}

​
Security Considerations

Token Expiration

  • Tokens expire after 24 hours
  • Check expiration before operations
  • Redirect to login when expired

Storage Security

  • Tokens stored in localStorage
  • Clear on logout
  • Encrypt sensitive data

​
Error Handling

Common token verification errors:
  • TOKEN_EXPIRED: Token has expired
  • INVALID_TOKEN: Token is malformed
  • PARENT_MISMATCH: Parent-child relationship verification failed