Skip to content

Comments

feat: [UIE-10284] - IAM: session token refresh#13430

Open
aaleksee-akamai wants to merge 4 commits intolinode:developfrom
aaleksee-akamai:UIE-10284
Open

feat: [UIE-10284] - IAM: session token refresh#13430
aaleksee-akamai wants to merge 4 commits intolinode:developfrom
aaleksee-akamai:UIE-10284

Conversation

@aaleksee-akamai
Copy link
Contributor

@aaleksee-akamai aaleksee-akamai commented Feb 23, 2026

Description 📝

This PR fixes an issue with the session token during refresh.

  • For account_admin / account_viewer, we only need to send a request using the parent token
  • For not account_admin / account_viewer users, we don’t know the euuid because it is retrieved from the account endpoint, which returns 403 Unauthorized. So we need to take an euuid from child test account, store it and then use it to refresh a session

Changes 🔄

List any change(s) relevant to the reviewer.

  • Send a payload with a parent token
  • Fix a routing issue for delegate users
  • Add logic for getting a euuid

Scope 🚢

Upon production release, changes in this PR will be visible to:

  • All customers
  • Some customers (e.g. in Beta or Limited Availability)
  • No customers / Not applicable

How to test 🧪

Prerequisites

(How to setup test environment)

  • use legacy parent account
  • use account_admin parent account
  • use not account_admin parent account

Reproduction steps

(How to reproduce the issue, if applicable)

  • Login to CM as parent user and switch account to be delegate user.
  • Wait for some time (around 10 mins). (You can modify timeRemaining.minutes to 13 in the SessionExpirationDialog component so you don’t have to wait)
  • "Your session is about to expire" popup will appear.
  • Click "Continue Working" button.

Verification steps

(How to verify changes)

  • Session refresh works for all accounts
Author Checklists

As an Author, to speed up the review process, I considered 🤔

👀 Doing a self review
❔ Our contribution guidelines
🤏 Splitting feature into small PRs
➕ Adding a changeset
🧪 Providing/improving test coverage
🔐 Removing all sensitive information from the code and PR description
🚩 Using a feature flag to protect the release
👣 Providing comprehensive reproduction steps
📑 Providing or updating our documentation
🕛 Scheduling a pair reviewing session
📱 Providing mobile support
♿ Providing accessibility support


  • I have read and considered all applicable items listed above.

As an Author, before moving this PR from Draft to Open, I confirmed ✅

  • All tests and CI checks are passing
  • TypeScript compilation succeeded without errors
  • Code passes all linting rules

@aaleksee-akamai aaleksee-akamai self-assigned this Feb 23, 2026
@aaleksee-akamai aaleksee-akamai added the IAM Delegation Implementing the new Parent/Child delegation UI label Feb 23, 2026
@aaleksee-akamai aaleksee-akamai marked this pull request as ready for review February 24, 2026 09:34
@aaleksee-akamai aaleksee-akamai requested a review from a team as a code owner February 24, 2026 09:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

IAM Delegation Implementing the new Parent/Child delegation UI

Projects

Status: Review

Development

Successfully merging this pull request may close these issues.

1 participant