fabro/lib
Scott Werner 7edef76d77 Revoke replayed auth sessions transactionally
Delete the owning auth session inside the refresh-token rotation transaction when a spent token is replayed. Return the replay outcome only after the revocation commits, and propagate database failures without claiming the chain was revoked.
2026-08-21 13:55:41 -04:00
..
apps Revoke replayed auth sessions transactionally 2026-08-21 13:55:41 -04:00
components Revoke replayed auth sessions transactionally 2026-08-21 13:55:41 -04:00
foundation Merge main into feat/refresh-tokens-sqlite 2026-08-21 13:16:14 -04:00
packages/fabro-api-client Persist workflow version lineage on runs 2026-08-21 12:39:02 -04:00