Skip to content

Change session auth to pass around one-time redeemable tokens rather than session tokens - #8217

Open
Prospector wants to merge 3 commits into
mainfrom
prospector/new-auth-passing-method
Open

Prospector wants to merge 3 commits into
mainfrom
prospector/new-auth-passing-method

Conversation

@Prospector

Copy link
Copy Markdown
Member

No description provided.

@Prospector
Prospector added this pull request to stack #8218 November 3, 2026 20:55
@github-actions

github-actions Bot commented Nov 3, 2026 •

Copy link
Copy Markdown
Contributor

Note

This changelog has been merged into the changelog for #8142

Pull request changelog

App

Added

Changed

Deprecated

Removed

Fixed

Security

Website

Added

Changed

Deprecated

Removed

Fixed

Security

Hosting

Added

Changed

Deprecated

Removed

Fixed

Security

@greptile-apps

greptile-apps Bot commented Nov 3, 2026 •

Copy link
Copy Markdown
Contributor

RetriggerView in GreptileConfidence Score: 5/5

[Critical impact] The PR appears safe to merge, with no outstanding findings.

Summary

Replaces session tokens in OAuth callback URLs with short-lived, single-use codes tied to the browser’s PKCE verifier.

  • OAuth callbacks return short-lived codes instead of sessions.
  • OAuth pages keep a verifier and exchange the returned code.
  • Search indexing keeps its metadata type explicit.

Reviews (4) · Last reviewed commit: "fix whitespace" · Reviewed by Greptile

@Prospector
Prospector requested a review from a team November 4, 2026 19:14
@mergify

mergify Bot commented Nov 10, 2026

Copy link
Copy Markdown

Tick the box to add this pull request to the merge queue (same as @mergifyio queue). If it does not match the queue conditions yet, it enters the queue once it does.

  • Queue this pull request

Base automatically changed from prospector/auth-modal to main November 10, 2026 20:42
@Prospector
Prospector force-pushed the prospector/new-auth-passing-method branch from 98495bb to c9fcb8b Compare November 10, 2026 20:42

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

2 participants