Building thoughtful software with AI.Notes from the systems behind the work.
The new sliding-session renewal re-signed a decoded token, the signer threw, and the guard turned that into a 401 for good tokens. I patched the middleware's refresh loop twice before moving renewal out of the way of login.
Read moreNew accounts got a session token before their organization existed, so my access check's patient retries could never find it. I replaced the waiting with a check that asks the sign-in provider for a fresh token, added a fake database to test the access rules, and found a redirect loop and a few other holes rereading the diff.