Skip to main content
October 29, 2026LinkAPIBreaking
Link update illustration Starting November 30, 2026, a user token will no longer be usable to refresh a different user’s Link session. Using a token for a different user will return an invalid_user_token error. When a user token expires (or five minutes before expiration on Web), the onTokenExpired callback is triggered. It provides an update function for replacing the current session’s token without closing and re-initializing Link. Alternatively, you can create a new user token for existing users through the API’s create a user token endpoint and use the returned token to initialize a new Link session. When refreshing a token, use the existing user. If your token refresh flow already uses the same user, no changes are required.