Authentication and consent
Connect through your Neuron login without sharing source credentials.
Current rights still matter
Access is checked against the selected grant and the user’s current workspace permissions. Token refresh does not add permissions or undo revocation. Do not assume account ownership gives an external application access without consent.
Production token storage
Keep tokens in protected per-user storage. Do not include them in client bundles, screenshots, application logs or Git. The local example is intentionally memory-only and is not a production session store.
SDK access is not an API key
A general-purpose service API key is not supplied by this SDK. For unattended services, design refresh, ownership, expiry and revocation deliberately. Do not repurpose a database URI, provider key or copied web cookie.
Revoke access
Local disconnect discards the example’s memory session. Revoke the connection through Neuron’s connection management to remove its grant. Keep this distinct from signing out of a single application.