Alexander Zielonka
2f6fc841b2
All checks were successful
Deploy GSM / deploy (push) Successful in 27s
The 15m access token only refreshed on a 401, but the dashboard uses optionalAuth and returns 200 even with an expired token, so the live page never noticed expiry until a manual reload. Backend: ACCESS_TOKEN_TTL 15m -> 1h. Frontend: export refreshAccessToken; App.jsx schedules a refresh ~1min before the token expires (and on tab focus/return), and logs out cleanly (redirect to /login) if the refresh token is gone — no reload needed. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>