SSO related #43

Merged

YousifShkara merged 3 commits from feat/mfa-spa into main

2026-05-22 12:03:15 +02:00

YousifShkara commented

2026-05-22 11:58:14 +02:00

Owner

No description provided.

YousifShkara self-assigned this

2026-05-22 11:58:14 +02:00

YousifShkara added 2 commits

2026-05-22 11:58:14 +02:00

refresh CurrentUser from /v1/auth/me after each token rotation 167f8069df

Background refresh loop now calls a new refresh_user_from_me() helper after every successful token rotation. Pulls /v1/auth/me, updates the cached CurrentUser fields (role, name, email, timezone, avatar) from server state, and clears memberships so the loader effect re-fetches them.

Mokosh is RFC-compliant and typically omits id_token on refresh-grant responses (OIDC Core 12.2), so the cached id_token's claims would otherwise stay stale for the life of the session - a user demoted server-side would keep their old role visible (and bypassed) until full re-login.

Failures are silent: the cached user stays in place rather than bouncing the user to /login on transient /v1/auth/me errors.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

Merge remote-tracking branch 'origin/main' into feat/mfa-spa

Check / clippy + fmt + tests (pull_request) Failing after 8s

Details

834bb5d1b6

YousifShkara added 1 commit

2026-05-22 12:01:39 +02:00

Merge remote-tracking branch 'origin/main' into feat/mfa-spa

Check / clippy + fmt + tests (pull_request) Successful in 1m34s

Details

Create release / Create release from merged PR (pull_request) Has been skipped

Details

285f0bdd3a