JWT in GitHub for Jira

[subbuleo07]

I need your help in understanding 2 things about this app (GitHub for Jira):

1. Correct my understanding of authentication:

• Jira uses JWT to authenticate apps.
• During installation of this app, Jira will provide APP key (App ID) and secret which is shared secret between GitHub for Jira app and Jira.
• GitHub for Jira app will generate JWT tokens using App Key and shared secret.
• JWT is signed with the secret and sent to Jira for API calls.
• Jira will validate the JWT signature to confirm it is coming from valid source. After validation, it reads the claims in JWT and permissions configured in Jira for this app before allowing access.
• Same flow happens for the connection between GitHub for Jira app and Github.

2. I would like to know how long a generated JWT token is valid. Will it be generated for every call.