Bereket Engida 10056eb3fd fix(oauth): keep the state cookie alive as long as the state it protects ...

The signed state cookie expired after 5 minutes while the verification row
and the state payload it validates lived for 10, so callbacks in that window
failed with state_security_mismatch. Derive the cookie Max-Age and the row
TTL from the payload expiry and expose the window as account.stateExpiresIn
(default 600s).

2026-09-04 14:54:47 -07:00

..

_generated/docs/v1-6

docs: add versioned documentation (#11041)

2026-08-29 07:10:36 +09:00

blogs

docs: refine 1.7 release guidance (#10841)

2026-08-17 15:24:42 -04:00

changelogs

…

docs

fix(oauth): keep the state cookie alive as long as the state it protects

2026-09-04 14:54:47 -07:00