Code

refreshSession, deleteSession#38

Code

Merged

DavidBuchanan314 merged 12 commits intomainDavidBuchanan314/millipds:mainfrom token-revocationDavidBuchanan314/millipds:token-revocationCopy head branch name to clipboardJan 2, 2025

+304-74

Commits

Commits on Jan 2, 2025

• reject revoked auth tokens

  DavidBuchanan314

  committed
  a2cbc49

  Copy full SHA for a2cbc49

• use the same jti for session and refresh token

  DavidBuchanan314

  committed
  9617e8b

  Copy full SHA for 9617e8b

• bugfix

  DavidBuchanan314

  committed
  e4c5100

  Copy full SHA for e4c5100

• don't clobber service variable in appview proxy

  DavidBuchanan314

  committed
  6464e8b

  Copy full SHA for 6464e8b

• refactor symmetric auth into its own function

  DavidBuchanan314

  committed
  60332d2

  Copy full SHA for 60332d2

• reduce access token expiry window

  DavidBuchanan314

  committed
  7a92689

  Copy full SHA for 7a92689

• make a function for retrieving session info

  DavidBuchanan314

  committed
  373c949

  Copy full SHA for 373c949

• completely untested refreshSession

  DavidBuchanan314

  committed
  0adccf6

  Copy full SHA for 0adccf6

• tests for refreshSession

  DavidBuchanan314

  committed
  17867ff

  Copy full SHA for 17867ff

• deleteSession

  DavidBuchanan314

  committed
  0f38a76

  Copy full SHA for 0f38a76

• test deleted refresh token is invalid

  DavidBuchanan314

  committed
  30a201a

  Copy full SHA for 30a201a

• v3 migration

  DavidBuchanan314

  committed
  5863b8c

  Copy full SHA for 5863b8c