fabro/lib/apps/fabro-server
Scott Werner 7edef76d77 Revoke replayed auth sessions transactionally
Delete the owning auth session inside the refresh-token rotation transaction when a spent token is replayed. Return the replay outcome only after the revocation commits, and propagate database failures without claiming the chain was revoked.
2026-08-21 13:55:41 -04:00
..
migrations refactor: organize crates into three layers 2026-07-23 17:59:34 -04:00
src Revoke replayed auth sessions transactionally 2026-08-21 13:55:41 -04:00
tests Merge main into feat/refresh-tokens-sqlite 2026-08-21 13:16:14 -04:00
build.rs refactor: organize crates into three layers 2026-07-23 17:59:34 -04:00
Cargo.toml Add immutable workflow version resource 2026-08-13 16:34:52 -04:00