-
Notifications
You must be signed in to change notification settings - Fork 259
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[improvement] Move session refresh logic to Application level #6135
Conversation
🦋 Changeset detectedThe changes in this PR will be included in the next version bump. Not sure what this means? Click here to learn what changesets are. |
@@ -73,7 +73,7 @@ export class AuthenticateUtils { | |||
responseMode: window["AppUtils"]?.getConfig()?.idpConfigs?.responseMode ?? responseModeFallback, | |||
scope: window["AppUtils"]?.getConfig()?.idpConfigs?.scope ?? [ TokenConstants.SYSTEM_SCOPE ], | |||
sendCookiesInRequests: true, | |||
sessionRefreshInterval: window[ "AppUtils" ]?.getConfig()?.session?.sessionRefreshTimeOut, | |||
sessionRefreshInterval: -1, |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Is this expected?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This is to disable the session refresh from SDK. We can't pass undefined as SDK has a fallback value defined.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
There should be an option in the SDK to disable session refresh interval right?
Shall we create an issue in the SDK for this and move forward with the workaround for the timebeing.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Created an issue: asgardeo/asgardeo-auth-react-sdk#226
Purpose
Session refresh logic is moved to the Console application level. And disabled from the SDK. Improvement is done to avoid sending session refresh calls when the user is inactive.
Related Issues
Related PRs
Checklist
Security checks