Skip to content

Fix hub-sliding-sessions-e2e login route (bd-gppva1ee) - #844

Merged
shikokuchuo merged 1 commit into
mainfrom
bugfix/bd-gppva1ee-sliding-sessions-e2e-route
Oct 15, 2026
Merged

shikokuchuo merged 1 commit into
mainfrom
bugfix/bd-gppva1ee-sliding-sessions-e2e-route

Conversation

@shikokuchuo

Copy link
Copy Markdown
Member

What this fixes

The script scripts/hub-sliding-sessions-e2e.mjs failed at step 1. It logged in with POST /auth/refresh. That route was renamed to /auth/session in bd-s042qcxj (PR #417), so the hub returned 404 and the script crashed.

The change

Renames the three mentions of /auth/refresh to /auth/session: one comment, one fetch, one check label. Nothing else changes. The request body ({ credential }) and the CSRF header already match what /auth/session expects. The script's mock IdP is a Generic OIDC provider, so /auth/session is the right login endpoint.

Verification

Ran the script against the real hub binary, before and after:

  • Before: step 1 failed with 404, and the script crashed on the missing cookie.
  • After: all 16 checks pass. This includes the 120-second check that the session cookie still works after the Google token expires.

Closes bd-gppva1ee.

…pva1ee)

The script still posted to /auth/refresh, renamed to /auth/session in
bd-s042qcxj (PR #417), so it failed at step 1 with a 404. Payload and
CSRF contract unchanged ({ credential } JSON + X-Requested-With); the
script's mock IdP is a Generic provider, for which /auth/session is the
registered mint endpoint. Verified end-to-end: pre-fix run failed at
step 1 (status=404); post-fix run against the real hub binary passes
all 16 checks, including the 120 s sliding-session outliving leg.
@posit-snyk-bot

posit-snyk-bot commented Oct 15, 2026 •

Copy link
Copy Markdown
Contributor

✅ Snyk checks have passed. No issues have been found so far.

Status Scan Engine Critical High Medium Low Total (0)
✅ Open Source Security 0 0 0 0 0 issues
✅ Licenses 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

@shikokuchuo
shikokuchuo merged commit bb42dee into main Oct 15, 2026
11 checks passed
@shikokuchuo
shikokuchuo deleted the bugfix/bd-gppva1ee-sliding-sessions-e2e-route branch October 15, 2026 12:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants