markitosgv / JWTRefreshTokenBundle / 30995326333

100%

push

github

feat: configure the refresh behaviour per firewall

The longest-standing thing the bundle could not do: an application with a
customer API and an internal one wanting different session lengths had one
global ttl.

The obstacle was that the listener runs on Lexik's success event, which knows
nothing about the firewall, and on a login it is Lexik's authenticator that
ran, so nothing can be carried across. The request can be, and the firewall
map turns a request into a firewall.

Every option defaults to null rather than to the bundle's current value, so a
firewall that says nothing keeps following a default that later changes.
Cookie settings stay global; their unset state needs a design of its own.

98 of 98 new or added lines in 3 files covered. (100.0%)

1820 of 1821 relevant lines covered (99.95%)

25.78 hits per line