# Authentication Bearer token is changing? **URL:** \ **Category:** Questions & Help\ **Created:** [April 24, 2019, 10:46am UTC](https://community.homey.app/t/authentication-bearer-token-is-changing/12231 "2019-04-24T10:46:42Z")\ **Posts on this page:** 2\ **Page:** 1
**Author:** ![TmoT](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/tmot/32/9505_2.png) [@TmoT](https://community.homey.app/u/TmoT)\ **Post date:** [April 24, 2019, 10:46am UTC](https://community.homey.app/t/authentication-bearer-token-is-changing/12231/1 "2019-04-24T10:46:42Z")
Hi there, I’m using the Bearer token in order to launch flows from my Android widgets (in combination with an app to do http calls to homey and in combination with this app: [https://apps.athom.com/app/com.internet](https://apps.athom.com/app/com.internet) It works fine with the Bearer code, but today the Bearer code changed all of a sudden and my http API requests were not working anymore. Anyone has any idea when the Bearer code changes and how I can mitigate this problem? Thanks, Tim ---
**Author:** ![Phuturist](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/phuturist/32/49_2.png) [@Phuturist](https://community.homey.app/u/Phuturist)\ **Post date:** [April 24, 2019, 12:15pm UTC](https://community.homey.app/t/authentication-bearer-token-is-changing/12231/2 "2019-04-24T12:15:06Z")
This is in the firmware changelog for version 2.1.1: `[Core] Sessions now expire after 1 day` Athom made using the bearer token unusable for the sake of “security”. Suggested solution for your usecase was to use the webhook trigger card from the logica cards. This however exposes an unprotected endpoint where only the URL itself can hold some sort of “token”. The full URL would still be logged by webservers however (unlike using a token with the authorization header) and is therefor actually less secure. I switched to using MQTT triggers over a secured MQTT server.