Correct what the KamoDesktop SSO token's lifetime actually is

Shipped

August 25, 2026 at 2:49 PM UTC

Author

kamo

Commit

80112f8

The comment called the link "short-lived, single-use" and "5-minute", which is what caused the token expiry to be set as if it were a URL redemption window. It is the desktop session's reconnect window. Also records why the tab is pointed at the full URL rather than a scrubbed one: reloading re-submits ?data= and restores the session instead of dead-ending on a login screen.