-
Notifications
You must be signed in to change notification settings - Fork 23
Open
Labels
component: backendPull requests that update Go codePull requests that update Go codelanguage: Gopriority: P2 - Lowstatus: newtype: security
Milestone
Description
Description
Implement Redis-backed sessions for authentication to prevent repeated logins during OAuth2 flows.
Currently, the authentication service does not use sessions. This means that in any non-credentials OAuth2 flow, visiting the login page again forces the user to log in again.
Using Redis-backed sessions will allow the system to:
- Maintain user session state.
- Avoid unnecessary re-authentication.
- Improve user experience in multi-step authentication processes.
Tasks
- Add Redis as the session storage backend for authentication.
- Integrate session management into the authentication service.
- Ensure that:
- OAuth2 flows (non-credentials) maintain session state.
- Returning to the login page during an active session does not require re-login.
- Configure session expiration and cleanup policies in Redis.
- Test:
- Session creation and persistence.
- Session expiration behavior.
- Flow behavior across multiple login page visits.
Metadata
Metadata
Assignees
Labels
component: backendPull requests that update Go codePull requests that update Go codelanguage: Gopriority: P2 - Lowstatus: newtype: security