2 Commits

Author	SHA1	Message	Date
lilleman	4f6b60463b	Session re-mint on TTL expiry (todo §4); resolveSession flags a lapsed token, app.ts hot path re-mints via remintSession (roles re-read from Keto → fresh cookie) only when a live Kratos session backs it; a dead session clears the stale cookie	2026-06-18 10:25:05 +02:00
lilleman	38157605d0	Login completion (todo §4); /auth/complete: roles from Keto → metadata_public projection → tokenize → plainpages_jwt cookie; fix tokenizer projection metadata_admin→metadata_public (whoami strips admin metadata)	2026-06-17 23:15:28 +02:00