fix(auth): tighten refresh session revocation

2026-05-13 15:04:37 +08:00
parent b13870f71b
commit 4fecf9c975
36 changed files with 1664 additions and 170 deletions
--- a/server-rs/crates/api-server/src/runtime_settings.rs
+++ b/server-rs/crates/api-server/src/runtime_settings.rs
@@ -350,7 +350,10 @@ mod tests {
        let claims = AccessTokenClaims::from_input(
            AccessTokenClaimsInput {
                user_id: "user_00000001".to_string(),
-                session_id: "sess_runtime_settings".to_string(),
+                session_id: state.seed_test_refresh_session_for_user_id(
+                    "user_00000001",
+                    "sess_runtime_settings",
+                ),
                provider: AuthProvider::Password,
                roles: vec!["user".to_string()],
                token_version: 2,