fix(auth): revoke bearer sessions on sign out

This commit is contained in:
2026-07-10 06:39:08 -04:00
parent 540b901fd6
commit 34ac842078
8 changed files with 310 additions and 7 deletions
@@ -141,7 +141,7 @@ describe("sync snapshot routes", () => {
assert.equal(response.status, 201);
assert.deepEqual(await response.json(), uploadDocument(committed));
assert.deepEqual(d1.sessionConstraints, ["first-primary", "first-primary"]);
assert.deepEqual(d1.sessionConstraints, ["first-primary", "first-primary", "first-primary"]);
});
it("rejects a stale base before writing R2", async () => {
@@ -268,7 +268,7 @@ describe("sync snapshot routes", () => {
assert.equal(response.status, 409);
assert.deepEqual(await response.json(), conflictDocument(current));
assert.deepEqual(d1.sessionConstraints, ["first-primary", "first-primary"]);
assert.deepEqual(d1.sessionConstraints, ["first-primary", "first-primary", "first-primary"]);
});
it("preserves legacy encryption metadata on exact downloads", async () => {