mirror of
https://github.com/fabro-sh/fabro.git
synced 2026-09-05 08:10:39 +00:00
7edef76d77
Delete the owning auth session inside the refresh-token rotation transaction when a spent token is replayed. Return the replay outcome only after the revocation commits, and propagate database failures without claiming the chain was revoked. |
||
|---|---|---|
| .. | ||
| src | ||
| tests | ||
| Cargo.toml | ||