diff options
| author | Christophe Besson <cbesson@gmail.com> | 2026-09-17 10:26:09 +0200 |
|---|---|---|
| committer | Christophe Besson <cbesson@gmail.com> | 2026-09-17 10:26:09 +0200 |
| commit | 1fd284dbe33d05fd5037b172fe652a8a98f7b68d (patch) | |
| tree | 52465b6d438fc7d7bd96f1cf83571069eb0fa3d3 /packages/meshbay-node/src/meshbay_node/transport/webrtc_server.py | |
| parent | a98445ce246509b0d2600df14907f72b448a6d10 (diff) | |
| download | meshbay-1fd284dbe33d05fd5037b172fe652a8a98f7b68d.tar.gz | |
auth: a sign-out during a renewal must not write half a session
`{ ..._auth }` after the await spreads a null _auth to {}, so the renewal
stored a token with no username and no userId. The app renders the
signed-in interface from that and throws on user.username[0] — a blank
page on every load, in localStorage, until the site's data is cleared.
The sign-out wins the race now, and loadAuth treats an identity-less
object as signed out so a browser already holding one heals itself.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Diffstat (limited to 'packages/meshbay-node/src/meshbay_node/transport/webrtc_server.py')
0 files changed, 0 insertions, 0 deletions