commit e15528203973c88692e8a99fa6381f2442858463
author Austin Yuan <austinyuan@google.com> Mon Aug 17 17:26:51 2020 +0000
committer Austin Yuan <austinyuan@google.com> Tue Sep 01 15:46:26 2020 +0000
tree 789b8c3e68d40e8941a3cb404ec5b599b4938bc9
parent ba9dcf1809832c6c7b80df8f56e0ab2ed3952207

changelog-webapp: Automatic token refresh, secret manager

These changes modify the way the web app performs Oauth authentication. Instead of displaying the login page every time an access token expires, the app will automatically refresh the token if their previous session has not expired. It temporarily redirects the user to Google login, retreives the callback data, and redirects the user back to their previous page. Since the user has already authorized the application previously, this process is invisible to the user. Each session now only lasts one day, requiring the user to manually initiate the login process every 24 hours. Secret manager is also now used to store information that should not be publically accessible.

BUG=b/160901711
TEST=run local

Change-Id: I583bde51d03b10c6a953e5a510180a4a28144d4d