Remove some confusion between exchange and set-session endpoints, all using set-session now with a bearer code. Using codes in remote auth as well. Full separation of cookie and OIDC codes.

2026-02-16 14:26:20 +00:00
parent ebf5f6db2c
commit eece6d4a21
11 changed files with 257 additions and 134 deletions
@@ -53,7 +53,7 @@ function handleAuthenticated(result) {
  postToParent({
    type: 'auth-success',
    authenticated: true,
-    sessionToken: result.session_token
+    exchangeCode: result.exchange_code
  })
 }