- Update the `Authenticate` method in the OAuth guard to allow for token refresh when an access token is expired but still valid. - Introduce `TryRefreshToken` method to handle the refresh token logic, including token rotation and cookie management. - Implement `VerifyTokenAllowExpired` and `VerifyRefreshToken` methods to improve token verification processes. - Adjust error handling to provide clearer responses for token refresh failures. - Refactor token expiration strategies in the login process to ensure consistent handling of access and refresh tokens. |
||
|---|---|---|
| .. | ||
| authorized.go | ||
| authorized_test.go | ||
| errors.go | ||
| interfaces.go | ||
| oidc.go | ||
| types.go | ||
| utils.go | ||