diff --git a/src/api/SIGCM2.Api/appsettings.json b/src/api/SIGCM2.Api/appsettings.json
index 8666553..aeecbd0 100644
--- a/src/api/SIGCM2.Api/appsettings.json
+++ b/src/api/SIGCM2.Api/appsettings.json
@@ -6,6 +6,7 @@
     "Issuer": "sigcm2.api",
     "Audience": "sigcm2.web",
     "AccessTokenMinutes": 60,
+    "RefreshTokenDays": 7,
     "PrivateKeyPath": "keys/private.pem",
     "PublicKeyPath": "keys/public.pem",
     "PrivateKey": null,
diff --git a/src/api/SIGCM2.Infrastructure/Security/JwtOptions.cs b/src/api/SIGCM2.Infrastructure/Security/JwtOptions.cs
index f9dffcb..172bdd3 100644
--- a/src/api/SIGCM2.Infrastructure/Security/JwtOptions.cs
+++ b/src/api/SIGCM2.Infrastructure/Security/JwtOptions.cs
@@ -5,6 +5,7 @@ public sealed class JwtOptions
     public string Issuer { get; set; } = "sigcm2.api";
     public string Audience { get; set; } = "sigcm2.web";
     public int AccessTokenMinutes { get; set; } = 60;
+    public int RefreshTokenDays { get; set; } = 7;
 
     /// <summary>Path to private.pem file (dev). Used if PrivateKey is null.</summary>
     public string? PrivateKeyPath { get; set; }