It seems the access token is not refreshed when it expires
Token not refreshed #9
closed
opened by
Access tokens lifetime depends on the PDS implementation, mine uses access tokens with a short ( 5 minutes ) expiration time for non confidential clients. Also i would expect the account being deleted ( or at least marked as logged out ) after the token expires.
PDSls uses atcute's oauth library and maybe there is an issue communicating the token expiry to it?
I think so, i had a look to the sessions stored in local storage and the accounts on the bsky PDS and on my own PDS both have expiresAt: null
Made PR https://github.com/mary-ext/atcute/pull/44 in atcute, with this the session with the expired token is removed from the list when you reload the page maybe check also when entering a edit dialog
they expire after 2 weeks and you need to log back in, it's a limit of doing client side oauth imposed by the PDS reference implementation