No refresh token

[shamilto-epa]

Thank you for all your hard work on this package.

Intermittently the refresh token is lost in storage. I have been testing this for a few days and it especially occurs if I close the browser and wait 30-45+ minutes. I come back to the app and everything else is working fine and canRefresh is true but for some reason the actual persistentSession is lost.

The package keeps you logged in but when using tokens to communicate with API's (that validate tokens through a resource server) - this is causing issues because the tokens are not being refreshed and therefore are expired/not valid at certain times. Is there a way we could force a logout when a refresh is attempted but fails (instead of just retuning out of the refreshUserSession function)?

[itpropro]

Hi,
the default behavior actually is to log you out, if the refresh fails. Can you please verify if you have the same problems with the current beta version (beta 3)?
Also for the persistent sessions, are you sure that the persistent sessions are using a unstorage provider that is persistent (not memory which is reset on every server reload)?

[shamilto-epa]

Hi, the default behavior actually is to log you out, if the refresh fails. Can you please verify if you have the same problems with the current beta version (beta 3)? Also for the persistent sessions, are you sure that the persistent sessions are using a unstorage provider that is persistent (not memory which is reset on every server reload)?

I confirmed this is still occurring on the latest beta(bets .5)

The issue seems to occur when the server(dev server) is reloaded so you are probably right about the storage.

I do not have a redis store or any cache store setup. I am assuming it is using memory which is , temporarily, okay for our use case , but I would like to force a logout when this occurs(new code in beta 5)

[itpropro]

The nitro server is reloaded on every code change, even if you just saved an already saved file. Try to use the same storage config as the playground with fs (everything except for metadata is encrypted in there, as it is the persistent session):

  nitro: {
    storage: { // Local file system storage for demo purposes
      oidc: {
        driver: 'fs',
        base: 'oidcstorage',
      },
    },
  },