Authentication

Authentication follows the same JWT model as the API section.

iOS integration rules

• Generate JWT on your backend (never in app code).
• Pass the token when creating and launching WorkoutKit controllers.
• Refresh/reissue tokens from your backend according to your session policy.

DocC tutorial alignment

The DocC tutorial set includes an authentication chapter (05-auth) that complements this page and the API authentication requirements.