Skip to content

fix(auth): expired jwt and deauth#4801

Closed
SolidProgramming wants to merge 9 commits into
CactuseSecurity:developfrom
SolidProgramming:fix/issue_4767
Closed

fix(auth): expired jwt and deauth#4801
SolidProgramming wants to merge 9 commits into
CactuseSecurity:developfrom
SolidProgramming:fix/issue_4767

Conversation

@SolidProgramming

@SolidProgramming SolidProgramming commented Jun 22, 2026

Copy link
Copy Markdown
Contributor
  • Restored authentication now handles refresh failures consistently and publishes JwtExpiredEvent again so the relogin UI is shown.
  • Improved CircuitHandlerService so ConnectionDown only logs a warning, while CircuitClosed is the actual signal for ending the session. This reduces false-positive session closures when the browser tab is still open but the Blazor circuit has only temporarily lost connection. (this should fix the expired jwts and deauths)
  • Added a optional name parameter for periodic task runner to better log what runner is used

Also fixed a typo in jwtreader.

Closes #4767 (hopefully)

@SolidProgramming SolidProgramming self-assigned this Jun 22, 2026
@SolidProgramming SolidProgramming linked an issue Jun 22, 2026 that may be closed by this pull request
@sonarqubecloud

Copy link
Copy Markdown

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

UI JWT - idle browser sessions expire

1 participant