denozord/auth-portal
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 4 Wiki Activity

fix(auth): не отдавать SSO с просроченным JWT и не бить /me
Build and Push Auth Portal Docker Image / build-and-push (push) Successful in 1m38s
Details
Build and Push Auth Portal Docker Image / create-release (push) Skipped
Details

Browse Source 
getToken чистит expired; при плохом return_to остаёмся на login без /me.

Co-authored-by: Cursor <[email protected]>
This commit is contained in:
Denozordec
2026-07-18 16:08:50 +07:00
co-authored by Cursor
parent e2c45cf0fa
commit c23eb5ead0
4 changed files with 32 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/integrate-vps-tracker.md
+1
View File
@@ -107,6 +107,7 @@ pnpm --filter web dev # :5173
| 403 «нет доступа к приложению» | В portal не выдан app `vps` |
| 403 на write | Только `*:read` в permissions |
| Loop на login | `return_to` не в `RETURN_TO_ALLOWLIST` |
| Infinite SSO / 429 | Просроченный JWT в portal localStorage; или разный `JWT_SECRET`/`ISSUER`. Portal чистит expired token; VPS блокирует повторный handoff 12с |
| CORS | Portal и VPS на разных origin — fragment handoff не требует CORS для token |
## Production