fix(auth): update comments in AuthCallback and API client for clarity on token handling and refresh process

This commit is contained in:
Usman Baig
2026-01-23 10:45:52 +01:00
parent 4c7dc51db3
commit 3ca0bbd921
2 changed files with 3 additions and 2 deletions

View File

@@ -19,7 +19,8 @@ function AuthCallbackContent() {
if (processedRef.current) return
// * Check for direct token passing (from auth-frontend direct login)
// * TODO: This flow exposes tokens in URL, should be deprecated in favor of Authorization Code flow
// * This flow exposes tokens in URL, kept for legacy support.
// * Recommended: Use Authorization Code flow (below)
const token = searchParams.get('token')
const refreshToken = searchParams.get('refresh_token')