Trade each sign-in code once #115

Merged
jcoffey-dev merged 1 commits from fix/oauth-code-once into main 2026-10-18 22:40:32 +00:00
1 Commits
Author SHA1 Message Date
jcoffey-dev b436766880 Trade each sign-in code once
ci / build (pull_request) Skipped
ci / publish (pull_request) Skipped
ci / notices (pull_request) Successful in 46s
github/ci (branch) GitHub Actions
ci / github (pull_request) Successful in 1m42s
The callback page traded the code every time its effect ran: twice under
StrictMode, again when the translations loaded, and again on a reload of
the page. The server refuses a spent code, so a sign-in that had worked
could end on an error.

A code is now traded once. A second run leaves it to the trade under
way, and a code already traded (kept for the tab in sessionStorage) goes
on to the console when signed in, or to a fresh sign-in when not.

No new strings.
2026-10-18 15:33:19 -07:00