[object Object]

← back to George Gmail

george token-bridge: fix calendar re-consent link (TK-11553)

1cb1b7f2a376846083f7a37f6574d24a4347cf6f · 2026-09-12 20:12:12 -0700 · Steve Abrams

AUTH_ROUTE mapped GOOGLE_CALENDAR_REFRESH_TOKEN -> 'steve-office', but server.js
writes GOOGLE_CALENDAR_REFRESH_TOKEN only under the dedicated calendar flow
(state:'calendar', /auth/calendar). The steve-office /auth flow writes
GMAIL_REFRESH_TOKEN, so every automated re-consent nudge for a dead calendar
token pointed Steve at a flow that re-minted the healthy Gmail token and never
revived the calendar token. Advisory link text only; no runtime token behavior
changed.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01VggjiaLGkK4kjR1zCnVJ65

Files touched

Diff

commit 1cb1b7f2a376846083f7a37f6574d24a4347cf6f
Author: Steve Abrams <steve@designerwallcoverings.com>
Date:   Sat Sep 12 20:12:12 2026 -0700

    george token-bridge: fix calendar re-consent link (TK-11553)
    
    AUTH_ROUTE mapped GOOGLE_CALENDAR_REFRESH_TOKEN -> 'steve-office', but server.js
    writes GOOGLE_CALENDAR_REFRESH_TOKEN only under the dedicated calendar flow
    (state:'calendar', /auth/calendar). The steve-office /auth flow writes
    GMAIL_REFRESH_TOKEN, so every automated re-consent nudge for a dead calendar
    token pointed Steve at a flow that re-minted the healthy Gmail token and never
    revived the calendar token. Advisory link text only; no runtime token behavior
    changed.
    
    Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
    Claude-Session: https://claude.ai/code/session_01VggjiaLGkK4kjR1zCnVJ65
---
 token-bridge.mjs | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/token-bridge.mjs b/token-bridge.mjs
index fdb4e8c..c7bb364 100644
--- a/token-bridge.mjs
+++ b/token-bridge.mjs
@@ -21,7 +21,7 @@ const AUTH_ROUTE = {
   INFO_REFRESH_TOKEN: 'info',
   PERSONAL_REFRESH_TOKEN: 'steve-personal',
   AGENTABRAMS_REFRESH_TOKEN: 'agentabrams',
-  GOOGLE_CALENDAR_REFRESH_TOKEN: 'steve-office', // calendar re-auths on the steve-office Workspace flow
+  GOOGLE_CALENDAR_REFRESH_TOKEN: 'calendar', // TK-11553: dedicated calendar consent flow. server.js only writes GOOGLE_CALENDAR_REFRESH_TOKEN under state:'calendar' (/auth/calendar); the steve-office /auth flow writes GMAIL_REFRESH_TOKEN, so pointing here at 'steve-office' re-minted the HEALTHY Gmail token and never revived the dead calendar token.
 };
 
 function secret(key) {

← 50cc8f3 chore: v1.2.1 (session close) — TK-11529  ·  back to George Gmail  ·  george drain keep-list: exempt the 9 content-bearing TK-1155 1fb6464 →