atproto explorer pdsls.dev
atproto tool

Token not refreshed #9

closed
opened by willem.dobs.nl

It seems the access token is not refreshed when it expires

they expire after 2 weeks and you need to log back in, it's a limit of doing client side oauth imposed by the PDS reference implementation

Access tokens lifetime depends on the PDS implementation, mine uses access tokens with a short ( 5 minutes ) expiration time for non confidential clients. Also i would expect the account being deleted ( or at least marked as logged out ) after the token expires.

PDSls uses atcute's oauth library and maybe there is an issue communicating the token expiry to it?

I think so, i had a look to the sessions stored in local storage and the accounts on the bsky PDS and on my own PDS both have expiresAt: null

Made PR https://github.com/mary-ext/atcute/pull/44 in atcute, with this the session with the expired token is removed from the list when you reload the page maybe check also when entering a edit dialog

sign up or login to add to the discussion
Labels

None yet.

assignee

None yet.

Participants 2
AT URI
at://did:plc:q3enoeuha5b2zx4p4atxtb7x/sh.tangled.repo.issue/3m3acwe7cjk22