Purge private data after remote session revocation #338

Merged
timmy merged 1 commits from timmy/337-purge-private-data-after-remote-revocation into main 2026-08-08 20:18:40 +00:00
Owner

Closes #337

What changed

  • Distinguish correctly signed, unexpired revoked sessions from generic invalid/expired authentication.
  • Clear Stackchain-owned storage, queued outbox data, and dashboard caches before revoked devices can sign in again.
  • Cover API, top-level navigation, login bootstrap, and service-worker background delivery while preserving ordinary expiry recovery.

Verification

  • Focused: 78 passed in 6.75s
  • Full suite: 627 passed in 24.72s
  • git diff --check clean.
Closes #337 ## What changed - Distinguish correctly signed, unexpired revoked sessions from generic invalid/expired authentication. - Clear Stackchain-owned storage, queued outbox data, and dashboard caches before revoked devices can sign in again. - Cover API, top-level navigation, login bootstrap, and service-worker background delivery while preserving ordinary expiry recovery. ## Verification - Focused: `78 passed in 6.75s` - Full suite: `627 passed in 24.72s` - `git diff --check` clean.
timmy added 1 commit 2026-08-08 20:17:34 +00:00
security: purge data after remote session revocation (#337)
All checks were successful
CI / lint (pull_request) Successful in 37s
CI / build-frontend (pull_request) Successful in 6s
b4dc785dd8
timmy merged commit 9e68382bd7 into main 2026-08-08 20:18:40 +00:00
Sign in to join this conversation.
No reviewers
No Milestone
No project
No Assignees
1 Participants
Notifications
Due Date
The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: stackchain/stackchain-dashboard#338
No description provided.