fix: use fresh user data when refreshing sessions

[nicknisi]

Summary

Fixes an issue where refreshSession and updateSession were preserving stale user and impersonator data from existing sessions instead of using the fresh data returned by the WorkOS authenticateWithRefreshToken API.

Changes

• Updated refreshSession and updateSession to use current user/impersonator data from the API response
• Fixed test mocks to include the expected user data in the authentication response
• Ensures sessions stay up-to-date with any user attribute or impersonation status changes

Test Plan

• All existing tests pass
• Updated test mock to match real API behavior
• Verified lint checks pass

Fixes #35

[greptile-apps]

Greptile Summary

This PR fixes a critical bug in the AuthKit React Router library where session refresh operations were using stale user data instead of fresh data from the WorkOS API. The issue affected both refreshSession and updateSession functions in src/session.ts, which were incorrectly preserving user and impersonator data from the existing session rather than utilizing the updated information returned by the WorkOS authenticateWithRefreshToken API call.

The fix involves properly destructuring and using the user and impersonator fields from the API response when creating new session objects. This ensures that any changes to user attributes (like firstName, lastName, or email verification status) or impersonation status are immediately reflected in the refreshed session, maintaining data consistency between the WorkOS backend and the client-side session state.

The changes also include updates to the test mocks in src/session.spec.ts to properly simulate the complete API response structure, including user data, which ensures the tests accurately validate the fix and prevent regression of this issue.

Confidence score: 5/5

• This PR is extremely safe to merge with minimal risk of causing any issues
• Score reflects simple, well-tested bug fix that aligns with expected API behavior and follows established patterns
• No files require special attention as the changes are straightforward and well-validated

_{2 files reviewed, 1 comment}

_{Edit Code Review Bot Settings | Greptile}

[cmatheson]

🎉