snapshot

😩 Without snapshot

You type something like:

"hey so last session i was building this auth feature for a nextjs app. we had some issues with jwt tokens and i think we decided to use httpOnly cookies. also we were trying to figure out the refresh token expiry time and there was this bug where... wait what was the bug again?"

Next chat wastes 3–5 messages re-explaining:

• What you were building
• Which stack/frameworks
• What problems you hit
• What decisions you made
• Where you left off

✨ With snapshot

You type: /snapshot

Claude returns:

## 📸 Session Snapshot

**Project:** NextJS auth with JWT + refresh tokens
**Stack:** React, Next.js, TypeScript, PostgreSQL
**Goal:** Implement secure auth flow

### What we did
• Added JWT with 15min access token, 7d refresh token
• Moved refresh token to httpOnly cookie (not localStorage)
  to prevent XSS — rejected localStorage after security review
• Fixed race condition in token refresh endpoint using
  SELECT FOR UPDATE on the token record
• Rejected session-based auth — app is stateless, needs
  horizontal scaling across pods

### Current state
Auth flow working. Redis blocklist integrated.
Still need logout endpoint and integration tests.

### Agreed next steps
• Add logout endpoint that invalidates refresh tokens
• Write integration tests for the refresh flow

Next chat starts immediately. No context debt.