fix(auth): improve client session management #6

Closed
opened 2025-08-26 10:48:25 +00:00 by chartgerink · 1 comment
Owner

Currently, we set the access and refresh token manually.

  1. We can use HttpOnly for the refresh token for security.
  2. Ensure the sessions last beyond any single access token (currently it auto logs out after access token expires)
Currently, we set the access and refresh token manually. 1. We can use `HttpOnly` for the refresh token for security. 2. Ensure the sessions last beyond any single access token (currently it auto logs out after access token expires)
Author
Owner

Fixed by #13.

Fixed by #13.
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: researchequals/frontend#6
No description provided.