> For the complete documentation index, see [llms.txt](https://docs.ramper.xyz/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.ramper.xyz/embedded-wallet-sdk/quickstart/for-web-apps/version-1/sdk-specifications/session-management.md).

# Session Management

## Token Retrieval

If you need to manage your user's sessions, Ramper SDK exposes an idToken and a refreshToken. These tokens will be returned in a `ramperCredential` property if `issueIdToken` is set to `true` in the `init` function.

## Token Verification

The idToken is a JWT can be verified with your App Secret obtained through the developer console. (use "import \* as jwt from 'jsonwebtoken'")

![](/files/SuD4YelrQJWJe0p8YIl6)

Retrieving a new refreshToken if the existing refreshToken is still valid:

```
POST https://us-central1-ramper-prod.cloudfunctions.net/getRefreshedToken

Post Params (JSON):
{
  "refreshToken": "<USER_REFRESH_TOKEN>"
}
```