Clarify session values and reauthentication when a token expires#1409

Closed

julien-nc wants to merge 3 commits intomainfrom

enh/noid/prevent-reauth

Commits on Apr 10, 2026

fix: do not reauthenticate when a token is expired if there is an ongoing login flow
julien-nc
committed
enh: cleanup session values in LoginController::code when we don't need them anymore
julien-nc
committed
add a config flag to toggle the redirect in TokenService::reauthenticate
julien-nc
committed