If a user were to take too long to log in (a time period longer than the session timeout), the user's request will be dropped by envoy leaving the user waiting for the authservice to redirect to the app url, which will never happen. The auth service should return an http response explaining what has happened.
If a user were to take too long to log in (a time period longer than the session timeout), the user's request will be dropped by envoy leaving the user waiting for the authservice to redirect to the app url, which will never happen. The auth service should return an http response explaining what has happened.