> For the complete documentation index, see [llms.txt](https://support.storefront.co.za/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://support.storefront.co.za/release-notes/july-2026/auth0-expire-should-log-you-out-need-middleware-to-check.md).

# Auth0 expire should log you out (need middleware to check)

The backoffice now automatically logs users out when their session expires, and Auth0 tokens are properly checked and refreshed.

**This includes:**

* Automatic logout when a backoffice session expires
* Auth0 tokens are properly checked and refreshed

**How it benefits the Merchant**

Improves backoffice security by ensuring expired sessions are properly closed rather than left open, reducing unauthorized access risk.

**Potential FAQs**

Q: Do I need to log in more often now?

A: Tokens are properly refreshed while your session is valid, so this shouldn't add unnecessary logins.

Q: Do I need to configure anything for this?

A: No — this behavior applies automatically.