#A few questions about backstage authentication code (RefreshingAuthSessionManager).

2 messages · Page 1 of 1 (latest)

chilly mica
#

Hi all, some time ago I created this feature request: https://github.com/backstage/backstage/issues/25646

I am now implementing a copy-paste of the standard backstage authenticaton flow, but that makes all the calls to the authentication provider from the front end - it's literally the same code but with a minor adjustments. So I would like to clarify two things:

  1. What is the reason to not create new session if collapsedSessionRefresh could not for some reason refresh the session when there is an existing session, see this line
  2. What is the reason to not refresh session if session does not exist and I use instant popup flow. There is a comment on why but I don't understand it. What do you mean by stay in a synchronous call stack from the user interaction ? There are async calls anyway. What if I don't recursively call to this.getSession()?

If those things are indeed possible, then I will implement them in my code.

#

A few questions about authentication code (RefreshingAuthSessionManager).