Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Enforce session refresh in admin interface before token expires #53

Open
GabrielMajeri opened this issue Apr 3, 2024 · 0 comments
Open
Assignees
Labels
admin-interface Issues related to the admin interface back-end Issue related to the back end logic of the application enhancement New feature or request front-end Issue relating to UI/UX

Comments

@GabrielMajeri
Copy link
Member

Based on a discussion with George, we've determined that we should somehow handle the scenario where the user's JWT authentication token has silently expired and the API calls start failing for no apparent reason.

The only solution we can use (since NextAuth doesn't retrieve or store the refresh token from MS365) is to force the user to periodically sign in back into the app some time before the token expires, to ensure it stays fresh. We can implement a check to do so, but we should also display a message to the admin to let them know they're going to be signed out and will lose any unsaved changes. This could be done using a toast notification or some banner at the top of the page.

@GabrielMajeri GabrielMajeri added enhancement New feature or request front-end Issue relating to UI/UX back-end Issue related to the back end logic of the application admin-interface Issues related to the admin interface labels Apr 3, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
admin-interface Issues related to the admin interface back-end Issue related to the back end logic of the application enhancement New feature or request front-end Issue relating to UI/UX
Projects
None yet
Development

No branches or pull requests

2 participants