You might take a look at this, though... https://discord.com/channels/905144809105260605/1308564422096064604/1308564422096064604 And if you do check it out, and if it works... please let me know, so I can give it a go also. 🙂

> Does refreshing the access token once every few minutes to ensure the session stays active mean I'm keeping the user logged in for as long as the refresh token lasts? Essentially you're kind of "daisy chaining" refresh tokens, so in theory refreshing every 5 minutes would keep you authenticated indefinitely I found this article pretty helpful for describing refresh tokens; https://auth0.com/blog/refresh-tokens-what-are-they-and-when-to-use-them/

/** * src/components/SessionManager.tsx * This component tracks user activity and logs out the user after 3 hours of inactivity. */ import { useEffect, useRef } from "react"; import { useMedplum } from "@medplum/react"; const INACTIVITY_TIMEOUT = 3 * 60 * 60 * 1000; // 3 hours export function SessionManager() { const medplum = useMedplum(); const timeoutId = useRef(null); useEffect(() => { const resetTimer = () => { if (timeoutId.current) { clearTimeout(timeoutId.current); } timeoutId.current = setTimeout(() => { console.log("User inactive for 3 hours, logging out..."); medplum.signOut(); }, INACTIVITY_TIMEOUT); }; window.addEventListener("mousemove", resetTimer); window.addEventListener("keydown", resetTimer); window.addEventListener("scroll", resetTimer); window.addEventListener("click", resetTimer); resetTimer(); return () => { if (timeoutId.current) { clearTimeout(timeoutId.current); } window.removeEventListener("mousemove", resetTimer); window.removeEventListener("keydown", resetTimer); window.removeEventListener("scroll", resetTimer); window.removeEventListener("click", resetTimer); }; }, [medplum]); return null; } In the main.tsx, we wraped the SessionMaager by MedplumProvider.