# Authentication Bearer token is changing?

**URL:** <https://community.homey.app/t/authentication-bearer-token-is-changing/12231>\
**Category:** Questions & Help\
**Created:** [April 24, 2019, 10:46am UTC](https://community.homey.app/t/authentication-bearer-token-is-changing/12231 "2019-04-24T10:46:42Z")\
**Posts on this page:** 1\
**Showing post:** 2

<div class="post-metadata">

**Author:** ![Phuturist](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/phuturist/32/49_2.png) [@Phuturist](https://community.homey.app/u/Phuturist)\
**Post date:** [April 24, 2019, 12:15pm UTC](https://community.homey.app/t/authentication-bearer-token-is-changing/12231/2 "2019-04-24T12:15:06Z")

</div>

This is in the firmware changelog for version 2.1.1: `[Core] Sessions now expire after 1 day`

Athom made using the bearer token unusable for the sake of “security”. Suggested solution for your usecase was to use the webhook trigger card from the logica cards. This however exposes an unprotected endpoint where only the URL itself can hold some sort of “token”. The full URL would still be logged by webservers however (unlike using a token with the authorization header) and is therefor actually less secure.

I switched to using MQTT triggers over a secured MQTT server.

---

_[View the full topic](https://community.homey.app/t/authentication-bearer-token-is-changing/12231)._