Trong Huu Nguyen b22c130e60 fix(session/handler): invalidate session state if refresh attempt is a client error ...

A client error response for the refresh grant is assumed to be an
irrecoverable error; e.g. the refresh token is invalid, the
authorization is invalid, user is logged out, etc. In such cases we will
consider the session state to be invalid, and a new authorization grant
should be performed.

2022-09-04 17:15:40 +02:00

..

data_test.go

refactor: separate refresh-specific fields from session info; enable endpoint without refresh feature

2022-09-01 19:35:48 +02:00

data.go

refactor: separate refresh-specific fields from session info; enable endpoint without refresh feature

2022-09-01 19:35:48 +02:00

handler_test.go

refactor(session): extract session handler

2022-08-19 11:44:13 +02:00

handler.go

fix(session/handler): invalidate session state if refresh attempt is a client error

2022-09-04 17:15:40 +02:00

lock_test.go

feat(session): use locks for refreshing

2022-09-04 17:14:35 +02:00

lock.go

feat(session): use locks for refreshing

2022-09-04 17:14:35 +02:00

store_memory_test.go

feat: rudimentary support for refresh tokens

2022-08-26 14:32:39 +02:00

store_memory.go

feat(session): use locks for refreshing

2022-09-04 17:14:35 +02:00

store_redis_test.go

feat: rudimentary support for refresh tokens

2022-08-26 14:32:39 +02:00

store_redis.go

feat(session): use locks for refreshing

2022-09-04 17:14:35 +02:00

store_test.go

refactor(session/data): separate into object groups

2022-08-29 08:35:03 +02:00

store.go

feat(session): use locks for refreshing

2022-09-04 17:14:35 +02:00