-
Notifications
You must be signed in to change notification settings - Fork 3
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Fixes #86 and #106 - properly handle token expiry in the sabre dav au… #108
Conversation
d255f83
to
20a004f
Compare
Codecov Report
@@ Coverage Diff @@
## master #108 +/- ##
============================================
+ Coverage 93.33% 93.38% +0.04%
- Complexity 121 122 +1
============================================
Files 10 10
Lines 420 423 +3
============================================
+ Hits 392 395 +3
Misses 28 28
Continue to review full report at Codecov.
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I would expect code that checks for expired token and then do some actions to refresh it.
I don't understand what is going on here. some comments would be helpful.
I have an easy reproducer to test the 10min timeout, so whatever it does, I can easily veryfy, if it is successful afterwards :-)
$this->session->close(); | ||
return $this->principalPrefix . $userId; | ||
} catch (\Exception $ex) { | ||
$this->session->close(); |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I would expect code that checks for expired token and then do some actions to refresh it.
I don't understand what is going on here. some comments would be helpful.
I have an easy reproducer to test the 10min timeout, so whatever it does, I can easily veryfy, if it is successful afterwards :-)
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I would expect code that checks for expired token and then do some actions to refresh it.
We as the reply party cannot refresh the token - this is upon the clients to take care.
(The server has no refresh token)
…th backend for openidconnect
Description
token expiry shall not lead to 500 but a proper 401
Related Issue
How Has This Been Tested?
Screenshots (if appropriate):
Types of changes
Checklist:
Open tasks: