What is my refresh token lifetime on the free tier?
auth
Hi,
Quick question about refresh token lifetime on the Free tier.
Issue: Users are getting signed out after ~12 hours (overnight), even though: -
persistSession: true
persistSession: true
-
autoRefreshToken: true
autoRefreshToken: true
- Session stored in
chrome.storage.local
chrome.storage.local
- Using PKCE flow
What I've Checked: 1. JWT Settings in dashboard shows: - Access token expiry: 3600s (1 hour) - No visible "Refresh token lifetime" setting (free tier?)
2. Queried
auth.refresh_tokens
auth.refresh_tokens
table: - No
expires_at
expires_at
field -
created_at
created_at
is populated - Token not revoked
3. Session token in storage: - No
refresh_token_expires_at
refresh_token_expires_at
field in the JWT
Question: What is the default refresh token lifetime for Free tier projects? - Is it 24 hours or 7 days? - Can free tier users configure this, or is it fixed?
Context: This is for a browser extension (Chrome) where users expect to stay signed in between computer restarts.
Supabase gives you the tools, documentation, and community that makes managing databases, authentication, and backend infrastructure a lot less overwhelming.