Skip to content

Prevent transient auth failures from logging out users - #27

Merged
shobhit-seg merged 1 commit into
mainfrom
codex/prevent-fake-auth-logouts
Jul 6, 2026
Merged

shobhit-seg merged 1 commit into
mainfrom
codex/prevent-fake-auth-logouts

Conversation

@shobhit-seg

Copy link
Copy Markdown
Collaborator

Summary

  • Preserve HTTP status in web API errors
  • Redirect to login only when /me returns 401
  • Show a retryable unavailable state for transient /me failures
  • Log auth failure reasons for missing cookie, missing session row, and expired session

Validation

  • ./node_modules/.bin/biome check . --error-on-warnings
  • package-level tsc --noEmit for shared, api, and web
  • package-level Vitest for shared, api, and web

Note: local pnpm in this shell is v11 and attempted to reinstall/purge modules, so validation used installed local binaries directly.

@shobhit-seg
shobhit-seg requested a review from daga-segwise July 6, 2026 07:11
@shobhit-seg
shobhit-seg added this pull request to the merge queue Jul 6, 2026
Merged via the queue into main with commit 1cf2ae6 Jul 6, 2026
1 check passed
@shobhit-seg
shobhit-seg deleted the codex/prevent-fake-auth-logouts branch July 6, 2026 07:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants