Content
View differences
Updated by Kabiru Mwenja 4 months ago
As part of the implementation of <mention class="mention" data-id="67613" data-type="work_package" data-text="###67613">###67613</mention> we introduced a OAuth token that is used by the BlockNote <-> Hocuspocus integration, allowing the YJS provider (which is hocuspocus) to use the OpenProject API on behaf of the user who is using the application.
More context at [https://github.com/opf/openproject/pull/20363#discussion\_r2444637129](https://github.com/opf/openproject/pull/20363#discussion_r2444637129)
The goal of this implementation is to make sure the refresh token is quite short lived and that we implement a mechanism to refresh the token when necessary.
**QA Notes**
* The user experience on documents should remain the same- i.e. no regressions or interruptions to the document
* Please look out of disconnect/reconnect blips- as this feature refreshes the openproject <-> hocuspocus authentication state periodically
* Please also look out for the behaviour when the browser tab is left in the background for a long time, or computer "goes to sleep"
More context at [https://github.com/opf/openproject/pull/20363#discussion\_r2444637129](https://github.com/opf/openproject/pull/20363#discussion_r2444637129)
The goal of this implementation is to make sure the refresh token is quite short lived and that we implement a mechanism to refresh the token when necessary.
**QA Notes**
* The user experience on documents should remain the same- i.e. no regressions or interruptions to the document
* Please look out of disconnect/reconnect blips- as this feature refreshes the openproject <-> hocuspocus authentication state periodically
* Please also look out for the behaviour when the browser tab is left in the background for a long time, or computer "goes to sleep"