fix(auth): revoke bearer sessions on sign out

2026-07-10 06:39:08 -04:00
parent 540b901fd6
commit 34ac842078
8 changed files with 310 additions and 7 deletions
@@ -159,7 +159,7 @@ describe("destructive action proofs", () => {
    );

    assert.equal(response.status, 200);
-    assert.deepEqual(d1.sessionConstraints, ["first-primary", "first-primary"]);
+    assert.deepEqual(d1.sessionConstraints, ["first-primary", "first-primary", "first-primary"]);
  });

  it("requires the exact timestamp and session for an account deletion replay", async () => {