Skip to main content
This guide assumes you have already installed and configured JWT Auth Pro. If you haven’t, please follow the Installation Guide first.

Authentication Flow

1. Get a Token

To authenticate a user and get a JWT token:

2. Use the Token

Make authenticated requests using the token. Here’s an example using the WordPress /me endpoint to get the current user’s data:

3. Refresh Token

When the access token expires, use the refresh token to get a new one:

4. Revoke Token (Logout)

When a user logs out or you need to invalidate a token, use the revoke endpoint:
Remember to never expose your JWT secret key or store tokens in plain text. Always use secure storage methods appropriate for your platform.