fix(auth): revoke privileges immediately on role change, deactivation, or deletion - #9360

Open

lstein wants to merge 22 commits into

invoke-ai:mainfrom

lstein:fix/multiuser-privilege-revocation

Commits on Jul 31, 2026

fix(auth): revoke privileges immediately on role change, deactivation, or deletion

lstein
and
claude
committed
6693e41
fix(events): keep server-internal events out of the API schema; fix admin test stubs

lstein
and
claude
committed
6b75acf
feat(auth): invalidate tokens on password change via a revocation epoch
lstein
committed
742e863
fix(auth): stop special-casing the system user in queued-execution checks
lstein
committed
d46d3b3

Commits on Aug 8, 2026

Merge branch 'main' into fix/multiuser-privilege-revocation
JPPhoto
authored
77758e6

Commits on Aug 9, 2026

fix(auth): enforce the last-administrator invariant inside the write transaction

lstein
and
claude
committed
e9317f6
fix(sockets): a socket dropping mid-loop must not abandon re-authorization

lstein
and
claude
committed
e55344f
fix(session-processor): re-read the owner before cancelling its running item

lstein
and
claude
committed
7de5f90
fix(tests): stub `configuration` in the device-pin test's invoker

lstein
and
claude
committed
8c3d78b
fix(tests): add token_epoch to the last-admin fixture's users table

lstein
and
claude
committed
78359a3
fix(auth): stop the system account from laundering away the last-admin guard

lstein
and
claude
committed
10a2226
fix(session-processor): honor the access-changed event when the owner re-read fails

lstein
and
claude
committed
0c0f875
fix(auth): demote the system account on databases where it was promoted

lstein
and
claude
committed
76dc920
test(sockets): describe the mid-loop test by what it actually pins

lstein
and
claude
committed
8bfcb88
chore(typegen): regenerate for the update_user docstring change

lstein
and
claude
committed
1762d2d
Merge branch 'main' into fix/multiuser-privilege-revocation
lstein
authored
336cc95
Merge branch 'main' into fix/multiuser-privilege-revocation
JPPhoto
authored
90c2fd9
fix(auth): close the system account's login path in all three directions

lstein
and
claude
committed
f765f31
fix(session-processor): fail closed when the queue item's owner cannot be read

lstein
and
claude
committed
b74d34e
fix(sockets): revalidate open sockets against the database

lstein
and
claude
committed
68525ec
docs(multiuser): describe live revocation, not just token expiry

lstein
and
claude
committed
8a3d38d
fix(auth): route the sliding-window refresh through resolve_authorized_user

lstein
and
claude
committed
49d00b3