managarten/services/mana-core-auth/src
Till-JS 5c688d713e fix(mana-core-auth): return real refreshToken in SSO session-to-token exchange
The sessionToToken method was incorrectly returning the session cookie
token instead of the actual refreshToken from the database. This caused
"No refresh token available" errors when users logged in via SSO
(cross-domain cookie) because the /api/v1/auth/refresh endpoint expects
the refreshToken field from the sessions table, not the cookie token.

Now the method:
- Fetches the session from database by cookie token
- Uses existing refreshToken if available
- Generates and stores a new refreshToken if missing
- Returns the actual refreshToken that works with token refresh

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-02-02 16:05:44 +01:00
..
__tests__/utils fix(mana-core-auth): complete production readiness with test fixes 2026-02-01 14:18:58 +01:00
ai 🐛 fix(auth): remove type-only import of ConfigService in AiService 2025-12-04 19:08:37 +01:00
analytics fix(mana-core-auth): complete production readiness with test fixes 2026-02-01 14:18:58 +01:00
auth fix(mana-core-auth): return real refreshToken in SSO session-to-token exchange 2026-02-02 16:05:44 +01:00
common fix(mana-core-auth): complete production readiness with test fixes 2026-02-01 14:18:58 +01:00
config 🐛 fix(mana-core-auth): use EdDSA for OIDC id_token signing 2026-02-01 13:24:55 +01:00
credits fix(mana-core-auth): complete production readiness with test fixes 2026-02-01 14:18:58 +01:00
db feat(bots): enable Redis SSO for todo-bot and calendar-bot 2026-02-02 14:51:23 +01:00
email 🐛 fix(mana-core-auth): use EdDSA for OIDC id_token signing 2026-02-01 13:24:55 +01:00
feedback Fix wrong type 2025-12-04 23:25:25 +01:00
health 🐛 fix(matrix-mana-bot): resolve QEMU emulation failure in CI 2026-02-01 13:59:04 +01:00
metrics feat(stats): add user statistics to Prometheus metrics and Grafana 2026-01-26 10:53:57 +01:00
referrals fix(mana-core-auth): complete production readiness with test fixes 2026-02-01 14:18:58 +01:00
settings feat(settings): add device-specific settings storage 2025-12-11 23:49:18 +01:00
tags feat: major update with network graphs, themes, todo extensions, and more 2025-12-10 02:37:46 +01:00
app.module.ts 🐛 fix(mana-core-auth): use EdDSA for OIDC id_token signing 2026-02-01 13:24:55 +01:00
main.ts 🐛 fix(mana-core-auth): use BASE_URL as JWT issuer for OIDC compatibility 2026-02-01 13:55:05 +01:00