The session established after a successful SMART App Launch.
Hosts persist this object in their session store (cookie session, Redis, etc.).
accessToken is always present; expiresAt is an absolute Unix timestamp in milliseconds, computed locally on receipt.
Confidential client secrets are intentionally not stored here — supply them separately when refreshing or revoking.
The session established after a successful SMART App Launch.
Hosts persist this object in their session store (cookie session, Redis, etc.).
accessTokenis always present;expiresAtis an absolute Unix timestamp in milliseconds, computed locally on receipt. Confidential client secrets are intentionally not stored here — supply them separately when refreshing or revoking.