You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Sends the ID token with the refresh request so it can be used to validate the authenticated fulcra_session_id, and attach it to the new access and ID tokens after refresh.
gklei
changed the title
WIP: Preserve session via id_token
Preserve session via id_token
Jun 17, 2026
Fun question: What happens when we need to refresh the ID token?
@gklei and I tried changing the ID token expiration time to be relatively long (currently 30 days) and setting a maximum refresh token expiration to match. I think we could set that to a very long time if we want them to effectively not expire.
I also like your idea of using ignoreExpiration: true when verifying the ID token in the refresh flow. That would allow us to use the ID token for more normal purposes with a normal lifespan if we want to at some point. I'll plan on adding that and reverting the expiration changes, unless a long ID token expiration time sounds better than accepting an expired ID token—I'm going in circles about the trade-offs.
lancelets
changed the title
Preserve session via id_token
Persist ID token in FulcraCredentials
Jul 27, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
gklei
changed the title
lancelets
changed the title
Sends the ID token with the refresh request so it can be used to validate the authenticated
fulcra_session_id, and attach it to the new access and ID tokens after refresh.