VCST-4760: Active Session List is empty after .NET10 Update

[OlegoO]

Description

fix: Active Session List is empty after .NET10 Update because OpenIddict 7 replaces the token_type_hint-inspired token types by the new URI-style token type identifiers.

References

QA-test:

Jira-link:

Artifact URL:

---

Note

Medium Risk
Touches OpenIddict token filtering and token-store registration order, which can affect authentication/session lifecycle behavior if misconfigured.

Overview
Fixes user session search/termination after the OpenIddict 7 upgrade by replacing hard-coded token Type/Status string filters with OpenIddictConstants identifiers in UserSessionsSearchService and UserSessionsService.

Adjusts DI ordering in Startup so the custom VirtoOpenIddictEntityFrameworkCoreTokenStore is registered after AddOpenIddict() to reliably override the default EF Core token store (preserving capture of IpAddress/UserAgent).

^{Written by Cursor Bugbot for commit 063a3e7. This will update automatically on new commits. Configure here.}

Image tag:
3.1008.0-pr-2990-063a-vcst-4760-063a3e7b

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud