Users Permissions

The users-permissions plugin handles Strapi user JWTs.

JWT expiry is set to 30 days to match the Better Auth session maxAge (apps/strapi/config/plugins.ts:14). Change both together or sessions and JWTs will desync.

See Authentication for the full UI auth flow.