You'll noticeTier: how much it should matter to you
2Useful: my rating, 1 to 5
0Signal: worth watching, 1 to 5
ElsewhereArea: what it touches
Bug FixesKind: in v2.1.222,
Bug FixesSection of the release
What
A refresh that loses the cross-process lock race is now reported as contention rather than as a failed refresh, and a compromised lock can still succeed.
Details
New DesignOauthLockContendedError marks the case where another process holds the refresh lock.
On a compromised lock the stored token is re-read and accepted if it is still fresh.
New telemetry codes: design_oauth_refresh_lock_contention, _lock_compromised, _lock_error.
Evidence
Design OAuth lock contention: another process is holding the refresh lock
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
