Jason Woltje
27c4c8edf3
fix( #411 ): QA-010 — fix minor JSDoc and comment issues across auth files
...
Fix response.ok JSDoc (2xx not 200), remove stale token refresh claim,
remove non-actionable comment, fix CSRF comment placement, add 403 mapping rationale.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com >
2026-02-16 13:50:04 -06:00
Jason Woltje
08e32d42a3
fix( #411 ): QA-008 — derive KNOWN_CODES from ERROR_MESSAGES keys
...
Eliminates manual duplication of AuthErrorCode values in KNOWN_CODES
by deriving from Object.keys(ERROR_MESSAGES).
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com >
2026-02-16 13:40:48 -06:00
Jason Woltje
752e839054
fix( #411 ): QA-005 — production logging, error classification, session-expired state
...
logAuthError now always logs (not dev-only). Replaced isBackendError with
parseAuthError-based classification. signOut uses proper error type.
Session expiry sets explicit session_expired state. Login page logs in prod.
Fixed pre-existing lint violations in auth package (campsite rule).
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com >
2026-02-16 13:37:49 -06:00
Jason Woltje
f500300b1f
feat( #417 ): create auth-errors.ts with PDA error parsing and mapping
...
Adds AuthErrorCode type, ParsedAuthError interface, parseAuthError() classifier,
and getErrorMessage() helper. All messages use PDA-friendly language.
Refs #417
2026-02-16 12:02:57 -06:00
