feat(api): invalidate sessions on user deactivation (MS21-AUTH-004) #582

Merged
jason.woltje merged 1 commits from feat/ms21-session-invalidation into main 2026-02-28 23:41:11 +00:00
Owner

When admin deactivates a user via PATCH /api/admin/users/:id, all sessions for that user are now deleted. Ensures deactivated users cannot continue authenticated sessions.

When admin deactivates a user via PATCH /api/admin/users/:id, all sessions for that user are now deleted. Ensures deactivated users cannot continue authenticated sessions.
jason.woltje added 1 commit 2026-02-28 23:29:40 +00:00
feat(api): invalidate sessions on user deactivation (MS21-AUTH-004)
Some checks failed
ci/woodpecker/push/api Pipeline failed
846c80f430
jason.woltje force-pushed feat/ms21-session-invalidation from 846c80f430 to e4a56ab850 2026-02-28 23:38:16 +00:00 Compare
jason.woltje merged commit af68f84dcd into main 2026-02-28 23:41:11 +00:00
Sign in to join this conversation.