Skip to content

Fix Swagger OpenID authentication state synchronization - #1882

Merged
krowvin merged 2 commits into
developfrom
agent/fix-swagger-auth-sync
Aug 19, 2026
Merged

Fix Swagger OpenID authentication state synchronization#1882
krowvin merged 2 commits into
developfrom
agent/fix-swagger-auth-sync

Conversation

@krowvin

@krowvin krowvin commented Aug 17, 2026

Copy link
Copy Markdown
Collaborator

Summary

This PR fixes the issue in dev where you login, then have to manually refresh ctrl+r, for the login button in the swagger page to update as well.

Reuse the application-wide OpenID session for Swagger login controls and bearer tokens while preserving the legacy CWMS AAA flow.

Previously, the header and Swagger page created separate Keycloak clients. Both attempted to consume the same PKCE callback, leaving Swagger signed out until a hard refresh after the header consumed the stored state.

Related Issue

No linked issue.

Validation

  • npm run test
  • npm run lint
  • npm run build
  • Local Chromium smoke test confirmed the header and Swagger controls update together without PKCE state errors

Checklist

  • AI tools used

Signed-off-by: Charles Graham, SWT <charles.r.graham@usace.army.mil>
@krowvin
krowvin marked this pull request as ready for review August 19, 2026 14:30
@krowvin
krowvin requested a review from MikeNeilson August 19, 2026 14:30
@krowvin
krowvin merged commit b7dc639 into develop Aug 19, 2026
11 checks passed
@krowvin
krowvin deleted the agent/fix-swagger-auth-sync branch August 19, 2026 15:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants