On occasion or when working offline, my user session expires yet the AuthorizeStep does not kick in and still allows me to navigate to protected routes.
Nice catch! The implementation looks good to me. Could you also please update the associated test(s). That way the tests will continue to reflect the code.
On occasion or when working offline, my user session expires yet the AuthorizeStep does not kick in and still allows me to navigate to protected routes.