article
A token that was never going to change kept the signup check waiting
New accounts got a session token before their organization existed, so my access check's patient retries could never find it. I replaced the waiting with a check that asks the sign-in provider for a fresh token, added a fake database to test the access rules, and found a redirect loop and a few other holes rereading the diff.
Read more