Félix Malfait
2237273869
## Summary - When returning to the app after idle (or after a deploy), the expired access token causes multiple simultaneous GraphQL queries to fail with `UNAUTHENTICATED`. Previously, each failure independently triggered its own `renewToken` call with the same refresh token. If **any single** renewal failed (e.g. server briefly slow after a deploy), the `catch` handler would nuke the session and redirect to sign-in — even if another concurrent renewal had already succeeded and written valid tokens. - This adds a shared `renewalPromise` so that only the first `UNAUTHENTICATED` error triggers a server-side renewal. All concurrent callers await the same promise and replay their operations once it resolves. This eliminates redundant refresh token rotation on the server and removes the race condition where a straggling failure could log out an already-renewed session. ## Test plan - [ ] Log in, wait >30 minutes (or manually expire the access token), then interact with the app — should silently renew without redirect to sign-in - [ ] Open browser DevTools Network tab, trigger the above scenario, and verify only **one** `renewToken` mutation is sent (instead of N) - [ ] With server temporarily stopped, verify that a genuine renewal failure still correctly redirects to sign-in (single `onUnauthenticatedError` call) - [ ] Open multiple browser tabs, let access tokens expire, interact in one tab — other tabs should also recover gracefully on their next request Made with [Cursor](https://cursor.com) --------- Co-authored-by: Cursor <cursoragent@cursor.com>
The #1 Open-Source CRM
🌐 Website · 📚 Documentation · 
Roadmap · 
Discord · 
Figma
Installation
See: 🚀 Self-hosting 🖥️ Local Setup
Does the world need another CRM?
We built Twenty for three reasons:
CRMs are too expensive, and users are trapped. Companies use locked-in customer data to hike prices. It shouldn't be that way.
A fresh start is required to build a better experience. We can learn from past mistakes and craft a cohesive experience inspired by new UX patterns from tools like Notion, Airtable or Linear.
We believe in Open-source and community. Hundreds of developers are already building Twenty together. Once we have plugin capabilities, a whole ecosystem will grow around it.
What You Can Do With Twenty
Please feel free to flag any specific needs you have by creating an issue.
Below are a few features we have implemented to date:
- Personalize layouts with filters, sort, group by, kanban and table views
- Customize your objects and fields
- Create and manage permissions with custom roles
- Automate workflow with triggers and actions
- Emails, calendar events, files, and more
Personalize layouts with filters, sort, group by, kanban and table views
Customize your objects and fields
Create and manage permissions with custom roles
Automate workflow with triggers and actions
Emails, calendar events, files, and more
Stack
- TypeScript
- Nx
- NestJS, with BullMQ, PostgreSQL, Redis
- React, with Recoil, Emotion and Lingui
Thanks
Thanks to these amazing services that we use and recommend for UI testing (Chromatic), code review (Greptile), catching bugs (Sentry) and translating (Crowdin).
Join the Community
- Star the repo
- Subscribe to releases (watch -> custom -> releases)
- Follow us on Twitter or LinkedIn
- Join our Discord
- Improve translations on Crowdin
- Contributions are, of course, most welcome!