cinny

Files

T

jared 67bd05fc96 feat(auth): OIDC phase 4/5/6 — token refresh, logout revocation, account link

- initMatrix.ts: import the shared Session type; when a session has a refresh
  token + oidc metadata, wire a LotusOidcTokenRefresher via createClient's
  refreshToken + tokenRefreshFunction (reactive 401 refresh). Rust crypto is
  unaffected (still keyed on userId/deviceId).
- client/oidcTokenRefresher.ts: OidcTokenRefresher subclass that persists rotated
  tokens back to the fallback session.
- client/oidcLogout.ts + logoutClient: best-effort revoke access+refresh tokens at
  the issuer's revocation_endpoint on logout (tolerant of failure).
- settings/account/OidcManageAccount.tsx: MSC2965 "Manage account" deep-link,
  shown only when authMetadata is present (OIDC servers); mirrors OtherDevices.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-06-30 16:12:13 -04:00

app

feat(auth): OIDC phase 4/5/6 — token refresh, logout revocation, account link

2026-06-30 16:12:13 -04:00

client

feat(auth): OIDC phase 4/5/6 — token refresh, logout revocation, account link

2026-06-30 16:12:13 -04:00

types

feat: voice channel user limit (P5-10) + call join/leave sounds (P5-16)

2026-06-12 22:20:22 -04:00

util

fix: ESLint errors, stale disable comments, bundle splitting