Clarify session values and reauthentication when a token expires - #1409

Closed

julien-nc wants to merge 3 commits into

mainfrom

enh/noid/prevent-reauth

Commits on Apr 10, 2026

fix: do not reauthenticate when a token is expired if there is an ongoing login flow
julien-nc
committed
8ce110d
enh: cleanup session values in LoginController::code when we don't need them anymore
julien-nc
committed
0e2d82b
add a config flag to toggle the redirect in TokenService::reauthenticate
julien-nc
committed
73205f5