Zayin/Ekklesia
3
0
Fork 0
Code Issues 1 Pull Requests 3 Actions Packages Projects Releases 8 Wiki Activity

fix(devices): keep an in-use display paired by renewing its credential (ADR 0056) #94

Open
ekklesia-bot wants to merge 1 commits from fix/device-credential-renewal into main
pull from: fix/device-credential-renewal
merge into: :main
Conversation 0 Commits 1 Files Changed 8
+255 -11
1 Commits
Author SHA1 Message Date
ekklesiaandClaude Opus 5.5 650932a170 fix(devices): keep an in-use display paired, renewing its credential instead of expiring it
CI / verify (pull_request) Successful in 1m7s
Details
CI / infrastructure-smoke (pull_request) Successful in 39s
Details
CI / package-release (pull_request) Successful in 50s
Details
CI / migration-smoke (pull_request) Successful in 2m22s
Details
CI / image-build (pull_request) Successful in 1m1s
Details
CI / deploy-smoke (same-origin) (pull_request) Successful in 44s
Details
CI / package-publication (pull_request) Successful in 58s
Details
CI / deploy-smoke (split) (pull_request) Successful in 2m34s
Details 
A device credential was accepted for a fixed 180 days from pairing, so every
working screen dropped to a pairing code on the anniversary of its pairing,
and screens paired together failed together. Measure the 180 days from when
the device was last seen instead, and have the display descriptor - which
every screen requests on start, on reconnect, and periodically - re-issue the
cookie that authenticated it with a fresh lifetime. The value is not rotated,
so a renewal lost in transit cannot strand a screen. Revoked, expired, and
unknown credentials are never renewed, a person never receives a device
cookie, and an abandoned screen still stops being an identity 180 days after
it was last seen. No migration: lastSeenAt already slides with use.

ADR 0056 supersedes the session-lifetime section of ADR 0036.

Co-Authored-By: Claude Opus 5.5 <[email protected]>
 2026-10-12 22:27:27 -05:00