Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Issue with pb_auth token: if it expires, the Wallet misbehaves and the user needs to log out #574

Open
andrea-dintino opened this issue Jan 31, 2025 · 0 comments
Assignees

Comments

@andrea-dintino
Copy link
Contributor

andrea-dintino commented Jan 31, 2025

(writing with @puria )

UPDATE: we just redeployed and it seems that the ISSUE is not true

ISSUE:

  • At each stop and start, pb generates a secret key. The secret key is used to sign the pb_auth JWT.
  • Currently, if the wallet stores a JWT authToken that is invalid, and pb doesn't accept it, the wallet doesn't have a mechanism to get a new token.

The wallet must be modified so that:

  • it must store email and password
  • when it tries to access pb with the token it has stored
  • IF pb returns an error, the wallet must send AGAIN email and password, to receive a new JWT. This must happen WITHOUT logging the user out
  • Then new JWT will overwrite the existing one

For this refactoring, tests must be written first.

@andrea-dintino andrea-dintino changed the title Issue with pb_auth token when redeploying the backend Issue with pb_auth token: if it expires, the Wallet misbehaves and the user needs to log out Feb 5, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants