fix(auth): secure refresh-token handling and rebuild client refresh logic - #92

Merged

Alimedhat000 merged 9 commits into

fix/refresh-token-storage

Aug 28, 2026

Commits on Aug 26, 2026

fix(server): authenticate logout via refresh cookie
Alimedhat000
committed
f20101a
fix(server): stop setting unused accessToken cookie on refresh
Alimedhat000
committed
7289f8f
fix(server): set refresh cookie flags per environment
Alimedhat000
committed
7c382b5
fix(client): auto-refresh session on 401 with single-flight refresh
Alimedhat000
committed
896a31d
fix(client): rebuild session bootstrap without wasLoggedOut hack
Alimedhat000
committed
fbd8e84
test(server): fix set-cookie typing in cookie flags test
Alimedhat000
committed
baea279

Commits on Aug 27, 2026