US-0975

Auth Update

SHIPPED

AI drafted the designLast verified 4 min ago

User story

Comments · 1

SCSarah Chen· 2h ago

“respond immediately”

What's our definition of a “critical” event here? Want to make sure the SLO matches.

Architect

ssooauthsessions

Channels & integrations · auto-detected from this story

In-app

Scenario 1: SSO sign-in issues a session Verified

Givena valid SSO identity

Whenthe user signs in

Thena short-lived session token is issued

Comments

Scenario 2: Expired session refreshes silently Verified

Givenan expired access token with a valid refresh token

Whenthe user makes a request

Thenthe session refreshes without forcing re-login

Comments