fix(auth): tighten refresh session revocation

2026-05-13 15:04:37 +08:00
parent b13870f71b
commit 4fecf9c975
36 changed files with 1664 additions and 170 deletions
--- a/server-rs/crates/api-server/src/tracking.rs
+++ b/server-rs/crates/api-server/src/tracking.rs
@@ -121,6 +121,9 @@ fn resolve_route_tracking_spec(method: &Method, path: &str) -> Option<RouteTrack
        ("GET", "/api/auth/sessions") => {
            Some(route_spec("auth_sessions_view", "auth", User, "anonymous"))
        }
+        ("POST", "/api/auth/sessions/{id}/revoke") => {
+            Some(route_spec("auth_revoke_session", "auth", User, "anonymous"))
+        }
        ("POST", "/api/auth/refresh") => {
            Some(route_spec("auth_refresh_success", "auth", Site, "site"))
        }