Preserve session on auth failure: ExpiredSession, returnTo, draft persistence#263

Merged

91jaeminjo merged 23 commits into

mainfrom

fix/auth-failure-redirect

May 21, 2026

Commits on May 21, 2026

feat(auth): add ExpiredSession state preserving tokens across auth failures

91jaeminjo
and
claude
committed
feat(auth): bump refresh threshold to 5 minutes

91jaeminjo
and
claude
committed
feat(http): split 401/403 — add PermissionDeniedException

91jaeminjo
and
claude
committed
feat(auth): per-server route guard via connectionRevision

91jaeminjo
and
claude
committed
feat(auth): funnel 401 surfaces through markSessionExpired

91jaeminjo
and
claude
committed
feat(auth): reactive cancellation on auth.session transitions

91jaeminjo
and
claude
committed
feat(auth): extend PreAuthState with frontendReturnTo and 30-min TTL

91jaeminjo
and
claude
committed
feat(auth): callback honors frontendReturnTo with relative-path guard

91jaeminjo
and
claude
committed
feat(auth): ConnectFlow accepts returnTo and stashes it in PreAuthState

91jaeminjo
and
claude
committed
feat(auth): route guard stashes return-to; HomeScreen forwards it

91jaeminjo
and
claude
committed
feat(auth): persist and restore composer drafts across auth redirects

91jaeminjo
and
claude
committed
fix(test): cover permissionDenied in FailureReason enum tests

91jaeminjo
and
claude
committed
fix(auth): complete 401/403 split in transport docs and consumers

91jaeminjo
and
claude
committed
fix(auth): log silent failures in composer drafts and token refresh

91jaeminjo
and
claude
committed
test(auth): pin returnTo plumbing and expired-session persistence

91jaeminjo
and
claude
committed
chore(auth): log rejected returnTo and document upload cancel path

91jaeminjo
and
claude
committed
fix(lobby): log non-funnel rooms and profile fetch failures

91jaeminjo
and
claude
committed
test(lobby): pin PermissionDeniedException does not funnel to expired

91jaeminjo
and
claude
committed
chore(auth): tune log severities and surface swallow behavior in docs

91jaeminjo
and
claude
committed
fix(diagnostics): drop orphan response groups before sorting

91jaeminjo
and
claude
committed
feat(lobby): inline "sign in again" affordance for expired servers

91jaeminjo
and
claude
committed
refactor(lobby): sealed switches + RoomsExpired panel widget test

91jaeminjo
and
claude
committed
refactor(auth): tighten frontendReturnTo invariant, sharpen failure logs

91jaeminjo
and
claude
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Preserve session on auth failure: ExpiredSession, returnTo, draft persistence#263

Preserve session on auth failure: ExpiredSession, returnTo, draft persistence#263
91jaeminjo merged 23 commits into
mainfrom
fix/auth-failure-redirect

Commits on May 21, 2026

feat(auth): add ExpiredSession state preserving tokens across auth failures

feat(auth): bump refresh threshold to 5 minutes

feat(http): split 401/403 — add PermissionDeniedException

feat(auth): per-server route guard via connectionRevision

feat(auth): funnel 401 surfaces through markSessionExpired

feat(auth): reactive cancellation on auth.session transitions

feat(auth): extend PreAuthState with frontendReturnTo and 30-min TTL

feat(auth): callback honors frontendReturnTo with relative-path guard

feat(auth): ConnectFlow accepts returnTo and stashes it in PreAuthState

feat(auth): route guard stashes return-to; HomeScreen forwards it

feat(auth): persist and restore composer drafts across auth redirects

fix(test): cover permissionDenied in FailureReason enum tests

fix(auth): complete 401/403 split in transport docs and consumers

fix(auth): log silent failures in composer drafts and token refresh

test(auth): pin returnTo plumbing and expired-session persistence

chore(auth): log rejected returnTo and document upload cancel path

fix(lobby): log non-funnel rooms and profile fetch failures

test(lobby): pin PermissionDeniedException does not funnel to expired

chore(auth): tune log severities and surface swallow behavior in docs

fix(diagnostics): drop orphan response groups before sorting

feat(lobby): inline "sign in again" affordance for expired servers

refactor(lobby): sealed switches + RoomsExpired panel widget test

refactor(auth): tighten frontendReturnTo invariant, sharpen failure logs