# X_SESSION_EXPIRED

## Means

session passed its idle or absolute expiry

## Typical cause

`cause` names which of the two clocks ran out

## Fix

sign in again, or raise `session.absoluteTtlMs` / `session.idleTtlMs` in `defineAuth({ session })`. The wiki used to name `POST /auth/sign-in` here; the framework mounts no such route, and the password half is the app's until it ships one

[Auth and sessions](/error-codes#auth-and-sessions)