It can be invalid for many reasons, the session might have expired. Or it was invalidated by the oidc provider as a security measure

Then you need to deal with that in the state in your app. Update ui, give a nice error message, offload data that the surer shouldn’t access anymore etc.

Def together, in isolation it’s relatively straight forward. What I got hung up and hadn’t considered was how to deal with sessions expiring.

E.g. user logs in, credits for a while and then clicks on something. This reaches out to an api which then returns 401 because the session is invalid

🇦🇺

This is fantastic. I’m 🇳🇴 and 🇦🇺

Got basic layout and auth working for my app and now working on the onboarding flow

👋

I'd love to me be included