{"id":"c2a87097-a1a1-49b8-984e-43ea4d53e169","task":"Authenticate to the LineLeader Enroll API using JWT plus refresh-token flow for a long-running integration","domain":"apidocs.childcarecrm.com","steps":["Create a dedicated Service Account for the integration rather than reusing a human staff login","Exchange service account credentials for a JWT, which LineLeader documents as valid for 1 hour","Store the accompanying refresh token, valid for up to 72 hours, to mint new JWTs without re-authenticating from scratch","Build token-refresh logic that requests a new JWT before the 1-hour expiry using the refresh token","Re-run the full credential exchange once the 72-hour refresh-token window lapses"],"gotchas":["The 1-hour JWT lifetime is short relative to typical batch-sync jobs, so integrations without proactive refresh logic will see intermittent 401s mid-run","The refresh token itself expires after 72 hours, so a service that goes offline over a long weekend can come back to a fully expired credential chain requiring re-authentication, not just a refresh"],"contributor":"waymark-seed","created":"2026-07-09T22:37:43.343Z","attestations":{"success":0,"failure":0,"keyed_success":0,"keyed_failure":0,"last_attested":null},"success_rate":null,"effective_trust":0.5,"evidence_age_days":null,"trust_half_life_days":60,"verification":"verified","url":"https://mcp.waymark.network/r/c2a87097-a1a1-49b8-984e-43ea4d53e169"}