tower-ui 0.61.18 — refresh-and-retry on 401

Frontend authFetch was bouncing every 401 straight to /login,
ignoring the 30-day refresh-token cookie the backend already issues.
Result: access-token TTL is 15 min, so the operator was kicked to
login every 15 min of idle.

Now: on 401, authFetch silently calls /api/auth/refresh, retries
the original request once with the new access token, and only
bounces to /login if refresh ALSO fails (refresh cookie expired or
revoked). Concurrent 401s coalesce onto a single in-flight refresh
to avoid rotating the refresh-token jti N times in a burst.
This commit is contained in:
Claude
2026-04-30 16:30:44 +03:00
parent fab8d62521
commit 66b9c60c68

View File

@@ -29,7 +29,7 @@ frontend:
enabled: true enabled: true
image: image:
repository: registry.odoosky.cloud/odoosky/docker-mirror/tower-ui repository: registry.odoosky.cloud/odoosky/docker-mirror/tower-ui
tag: "0.61.17" tag: "0.61.18"
pullPolicy: IfNotPresent pullPolicy: IfNotPresent
imagePullSecrets: imagePullSecrets:
- name: docker-mirror-pull - name: docker-mirror-pull