Skip to content

@W-22137898 Add session TTL management with auto-expiration UI updates - #30

Merged
Ferticidio merged 2 commits into
masterfrom
poc/chores/W-22137898-HandleSessionDuration
Apr 27, 2026
Merged

@W-22137898 Add session TTL management with auto-expiration UI updates#30
Ferticidio merged 2 commits into
masterfrom
poc/chores/W-22137898-HandleSessionDuration

Conversation

@Ferticidio

Copy link
Copy Markdown
Contributor
  • Add automatic UI update when session token expires — a precise setTimeout fires at the exact expiration moment, so the status flips to amber without any user interaction
  • Integrate server-side token introspection: when the local TTL expires, the portal checks /accounts/oauth2/introspect to confirm — if the server says the token is still active, the local expiration is updated with the real exp value and the timer is rescheduled
  • Hook handleProxyResponse into all proxy call sites to detect 401 responses and immediately mark the token as expired
  • Fix dark mode contrast for the "Token Expired" amber status indicator

Introduce server-side token introspection on expiration, scheduled
timeout for instant UI refresh when TTL expires, and sliding window
extension on successful API calls. Fix dark mode contrast for the
expired auth status indicator.
The token introspection already returns the real expiration from the
server, making the local sliding window redundant. Simplify
handleProxyResponse to only detect 401s.
@Ferticidio
Ferticidio merged commit ac458d2 into master Apr 27, 2026
17 checks passed
@Ferticidio
Ferticidio deleted the poc/chores/W-22137898-HandleSessionDuration branch April 27, 2026 12:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants