mozilla-releng / balrog / #5563

90%

push

circleci

Re-enable refresh tokens in the UI (#3812)

I had disabled them in #3468 because there were a problem due to
re-requesting MFA when the client was trying to use it. The issue got
fixed recently (in https://mozilla-hub.atlassian.net/browse/IAM-1935) so
we should be able to use refresh tokens now which will fix the issue
we're currently seeing where balrog sessions are expiring after 15mn
(the authorization token expiration time).

I left `useRefreshTokensFallback` off because AFAIU it'd try to login
the "normal" way (but in a hidden iframe) if the refresh token fails,
which would end up requiring MFA anyway and thus break.

2192 of 2574 branches covered (85.16%)

Branch coverage included in aggregate %.

5768 of 6276 relevant lines covered (91.91%)

0.92 hits per line