fix(auth): improve client session management #6

New issue

Closed

opened 2025-08-26 10:48:25 +00:00 by chartgerink · 1 comment

chartgerink commented

2025-08-26 10:48:25 +00:00

Owner

Currently, we set the access and refresh token manually.

We can use HttpOnly for the refresh token for security.
Ensure the sessions last beyond any single access token (currently it auto logs out after access token expires)

Currently, we set the access and refresh token manually. 1. We can use `HttpOnly` for the refresh token for security. 2. Ensure the sessions last beyond any single access token (currently it auto logs out after access token expires)