fix(login-flow-v2): validate session user and clarify flow handling#59429

Draft

joshtrichards wants to merge 8 commits intomasterfrom

jtr/refactor-LoginFlowService

Commits on Apr 3, 2026

refactor(LoginFlow): add comments and rename variables for clarity in service
joshtrichards
authored
refactor(LoginFlow(: slightly streamline getByLoginToken
joshtrichards
authored
refactor(LoginFlow): improve readability of crypto functions in service
joshtrichards
authored
refactor(LoginFlow): give getKeyPair() a named shape return value for clarity
joshtrichards
authored
chore(LoginFlow): improve grammar
joshtrichards
authored
refactor(LoginFlow): use existing ISecureRandom::CHAR_ALPHANUMERIC constant
joshtrichards
authored
fix(LoginFlow): defense-in-depth for UID in flowDone()
joshtrichards
authored
test(LoginFlow): update tests for refactored service
joshtrichards
authored