root 283e8f6b46 fix: prevent forced re-login from concurrent refresh token rotation ...

Rotated refresh tokens now stay valid for a 60s grace window so
concurrent refreshes (e.g. multiple browser tabs) each obtain a valid
new pair instead of being logged out. Admin-web additionally serializes
refreshes across tabs via the Web Locks API and reuses tokens already
rotated by another tab.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-07-03 20:55:19 +08:00

..

claims.go

feat(auth,prompt-rule): add password change with session revocation and scope prompt rules by brand

2026-05-20 18:09:53 +08:00

context_test.go

feat(auth): add workspace scope middleware and context

2026-04-24 22:18:54 +08:00

context.go

feat: scope articles by brand

2026-05-20 15:37:25 +08:00

jwt_test.go

feat(auth,prompt-rule): add password change with session revocation and scope prompt rules by brand

2026-05-20 18:09:53 +08:00

jwt.go

feat(auth,prompt-rule): add password change with session revocation and scope prompt rules by brand

2026-05-20 18:09:53 +08:00

login_guard_test.go

feat(login-guard): unlock entire scope and report deleted keys

2026-05-02 20:56:38 +08:00

login_guard.go

feat(login-guard): unlock entire scope and report deleted keys

2026-05-02 20:56:38 +08:00

middleware_test.go

feat(auth,prompt-rule): add password change with session revocation and scope prompt rules by brand

2026-05-20 18:09:53 +08:00

middleware.go

feat(auth,prompt-rule): add password change with session revocation and scope prompt rules by brand

2026-05-20 18:09:53 +08:00

password_cipher_test.go

feat(auth): support per-deploy login password key override

2026-05-14 11:54:40 +08:00

password_cipher.go

feat(auth): support per-deploy login password key override

2026-05-14 11:54:40 +08:00

permissions_test.go

feat: add tenant and user management with migrations, handlers, and tests

2026-04-01 00:58:42 +08:00

permissions.go

feat: add tenant and user management with migrations, handlers, and tests

2026-04-01 00:58:42 +08:00

session_store_test.go

fix: prevent forced re-login from concurrent refresh token rotation

2026-07-03 20:55:19 +08:00

session_store.go

fix: prevent forced re-login from concurrent refresh token rotation

2026-07-03 20:55:19 +08:00