Adrian Flores Cortes
|
149e44735f
|
feat(auth): Implement auto-refresh token interceptor (ST4.1 partial)
BLOCKER-001: Auto-Refresh Tokens
Implemented:
✅ Centralized API client with auto-refresh interceptor
✅ Request queueing (prevents multiple simultaneous refreshes)
✅ Retry logic (max 1 retry per request)
✅ Token management functions (get/set/clear)
✅ Auth service migrated to apiClient
✅ ET-AUTH-007 technical specification
Core functionality complete - Users no longer need to re-login every hour.
Pending:
- ST4.1.2: Backend refresh token rotation
- ST4.1.3: Migrate other services to apiClient
- ST4.1.4: Secure storage (httpOnly cookies)
- ST4.1.5: E2E tests
Files:
- apps/frontend/src/lib/apiClient.ts (new, 237 lines)
- apps/frontend/src/services/auth.service.ts (updated)
- docs/.../ET-AUTH-007-token-lifecycle-autorefresh.md (new, 634 lines)
Part of ST4: Blockers P0 Resolution.
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
|
2026-01-26 19:16:39 -06:00 |
|