Yes, the short live jwt is generally considered as best practices. This value usually around 15-20 minutes. But we are using 2 hours expiration time, for reduce the auth server load 😬( Management Decision )