How to trigger Refresh request from browser ?

[Jxck]

Hi Team

I'm digging current implementation behavior based on your prototype server.
https://glitch.com/edit/#!/dbsc-prototype-server

IIUC

• Server Responds Sec-Session-Registration and Set-Cookie: id=abc; Max-Age=10
• Browser Requests Sec-Session-Response w/ JWT which has refresh_url: refresh

10 sec later

• Browser requests to the server path which included in scope
• Browser detects id=abc Cookie was expired
• Browser Requests to /refresh w/ Sec-Session-Id internally

But, Browser internal request to /refresh doesn't happen.

What I missed here ?

[drubery]

Hello,

Confirming I can reproduce the issues with the Glitch server. Among other issues, refresh was not fully implemented. I'll follow up here once I can actually perform a refresh with the Glitch server.

[Jxck]

@drubery Thanks !!
I'm really interested in this API, Please keep in touch.

[drubery]

As of last night, the Glitch server successfully issues a challenge at registration and refresh, and Chrome versions 134.0.6988.0 (the newest Canary) does persist the registration.

Let me know if you have any more trouble.