Authentication

Android apps pass a JWT token when creating WorkoutKit fragments.

Token source

Generate JWT tokens on your backend and deliver them securely to the Android client. Avoid embedding static JWT values in your app code.

Runtime usage

At runtime, include jwtToken in both GoFragment.newInstance(...) and WorkoutVideoFragment.newInstance(...) calls.

If token validation fails, the GraphQL session flow will not complete.