search

social-sonar / Socialsonar

https://socialsonar.vercel.app/
GNU Affero General Public License v3.0
2 stars 0 forks source link

Review AppleID Token Expiration #207

Closed esteban-licausi-azumo closed 1 month ago

esteban-licausi-azumo commented 1 month ago

Description: Currently, the AppleID token is expiring every two days, requiring users to perform a logout/login to continue. The goal of this task is to investigate the cause of the token’s premature expiration and resolve the issue to prevent users from being forced to log out and back in so frequently.

Tasks:

1.  Review the current implementation of AppleID authentication.
2.  Verify the token expiration configuration.
3.  Determine if the issue is related to token refresh settings or Apple policies.
4.  Propose and apply a solution to extend the token validity or implement an automatic refresh flow.
5.  Perform tests to ensure the token no longer expires prematurely.

Acceptance Criteria:

•   Users should no longer be forced to log out and log back in every two days.
•   The token should remain valid for the specified duration, or it should automatically refresh when necessary.
raffi-bedoyan-azumo commented 1 month ago

It was an issue with the HTTP Status interpreted from the client. It was an inconsistency with the interpretation of the codes 401 and 403. I already fixed it.