Invalidate cached OAuth tokens when profiles change - #6427

Open

mihaimitrea-db wants to merge 14 commits into

mainfrom

auth-profile-fingerprint

Commits on Sep 7, 2026

auth: invalidate cached tokens when profiles change
mihaimitrea-db
committed
75fb3af
acceptance: fix profile fingerprint fixtures
mihaimitrea-db
committed
ab374d0
changelog: update profile fingerprint entry
mihaimitrea-db
committed
c69fa5d

Commits on Sep 8, 2026

auth: compute fingerprints from loaded profiles
mihaimitrea-db
committed
f20a48b
acceptance: document profile fingerprint test flows
mihaimitrea-db
committed
aa3b01d

Commits on Sep 9, 2026

acceptance: keep refresh fault local to test
mihaimitrea-db
committed
091ffb1
auth: fingerprint resolved profile config
mihaimitrea-db
committed
295f961
acceptance: isolate invalid refresh token test
mihaimitrea-db
committed
6177888
auth: reject tokens for missing profiles
mihaimitrea-db
committed
8311aac
auth: normalize scopes in profile fingerprints
mihaimitrea-db
committed
19dbc61
auth: simplify profile fingerprint tests
mihaimitrea-db
committed
04141ee
auth: normalize hosts in profile fingerprints
mihaimitrea-db
committed
81da84a
auth: simplify profile fingerprint tests
mihaimitrea-db
committed
49fc74d
acceptance: clarify stale account logout flow
mihaimitrea-db
committed
a1df656