authentication

[glyph]

The sessions layer is missing some stuff. This is an omnibus PR that adds it, and will add docs for it.

I would recommend starting the review by looking through the new documentation at https://klein--594.org.readthedocs.build/en/594/ — specifically https://klein--594.org.readthedocs.build/en/594/introduction/3-forms.html and https://klein--594.org.readthedocs.build/en/594/introduction/4-auth.html .

It's probably too big to land as-is. In fact, some parts of this are probably entirely new, separate projects that should be a dependency. Some of this stuff might be worth spinning out, but looking at the documentation, it would be difficult to land it piecemeal and get a cohesive story about what it's all for.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 100.00%. Comparing base (63516e9) to head (d50ce21).

Additional details and impacted files

@@            Coverage Diff             @@
##             trunk      #594    +/-   ##
==========================================
  Coverage   100.00%   100.00%            
==========================================
  Files           48        63    +15     
  Lines         3981      4857   +876     
  Branches       182       201    +19     
==========================================
+ Hits          3981      4857   +876     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[gkrnours]

Looks good to me.

[glyph]

@gkrnours In the course of fixing the deleteSession issue that you raised, I did have to go and add a little more test coverage to the insecure-token-scrubbing logic; specifically, making sure we didn't scrub ALL sessions (including insecure sessions) every time we use an insecure transport. Other than that though, I think this is ready to go!