Repository navigation
v0.7.0
The cookie strategy can now ask a configured refresher for a new token while it authenticates a request; the middleware writes the result to the cookie unless the request revokes the token. The default refresher re-issues a still-valid token past half its lifetime. Apps subclass it to recover expired sessions or apply their own lifetime rules. Claude-Session: https://claude.ai/code/session_01CmZXZEDaL3ZbsgNLro2JXv