Files
compose/internal
Alano Terblanche 816c83e401 fix(registry): read the Desktop session expiry from the token when claims lack it
The session payload may carry no claims, in which case the access token was reused for a minute without any expiry check, so an expired token could reach the registry and fail the pull instead of falling back. Read the exp claim from the JWT itself in that case. An expiry that cannot be read is still tolerated.

Signed-off-by: Alano Terblanche <[email protected]>
2026-10-07 14:24:28 +02:00
..
2024-12-17 16:50:14 +01:00