document strange token logic

ccims · Jul 30, 2024 · b950100 · b950100
1 parent 720072d
commit b950100
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/backend/src/api-internal/auth-redirect.middleware.ts b/backend/src/api-internal/auth-redirect.middleware.ts
@@ -61,6 +61,7 @@ export class AuthRedirectMiddleware extends StateMiddleware<
         if (!state.activeLogin.isValid) {
             throw new Error("Active login invalid");
         }
+        // if the login service handles the registration, two tokens were already generated: the code and the access token
         if (
             state.activeLogin.nextExpectedRefreshTokenNumber !=
             ActiveLogin.LOGGED_IN_BUT_TOKEN_NOT_YET_RETRIVED + (state.secondToken ? 2 : 0)