sepehr/Momento
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(auth): revoke JWT on logout and harden Google sign-in
Some checks failed
CI / Lint, Test & Build (push) Failing after 7m49s
Details
CI / Deploy production (on server) (push) Has been cancelled
Details

Browse Source 
Logout now increments sessionVersion so existing JWTs are rejected
server-side, deletes orphaned DB sessions, and uses redirectTo for signOut.
Google OAuth requests account selection each time; optional AUTH_GOOGLE_PROMPT=login
forces Google re-authentication on shared devices.

Co-authored-by: Cursor <cursoragent@cursor.com>
This commit is contained in:
Antigravity
2026-05-17 17:29:51 +00:00
parent 5b794d6449
commit db175ebff6
15 changed files with 89 additions and 16 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
memento-note/locales/en.json
View File

@@ -19,6 +19,8 @@
"rememberMe": "Remember me",
"orContinueWith": "Or continue with",
"continueWithGoogle": "Continue with Google",
"sessionExpired": "Your session has expired. Please sign in again.",
"oauthAccountNotLinked": "This Google account does not match your existing account. Use the same email or sign in with your password.",
"checkYourEmail": "Check your email",
"resetEmailSent": "We have sent a password reset link to your email address if it exists in our system.",
"returnToLogin": "Return to Login",