erio d844f3b6b5 feat: unified OAuth token refresh API to fix refresh_token race condition (#1035) ...

Introduce OAuthRefreshAPI as the single entry point for all OAuth token
refresh operations (both background TokenRefreshService and inline
TokenProvider), eliminating the race condition where two independent
refresh paths consume the same one-time-use refresh_token.

Key changes:
- New OAuthRefreshAPI with distributed lock + DB re-read + double-check
- All 4 platform refreshers implement OAuthRefreshExecutor (CacheKey)
- TokenRefreshService and TokenProviders share the same lock key
- Add errRefreshSkipped sentinel for accurate refresh statistics
- 7 new Path A unit tests covering all RefreshIfNeeded branches

chore: bump version to 0.1.100.2

2026-03-16 01:00:20 +08:00

..

jwtgen

fix claudecode review bug

2026-03-09 01:18:49 +08:00

server

feat: unified OAuth token refresh API to fix refresh_token race condition (#1035)

2026-03-16 01:00:20 +08:00