Make access revocation atomic across passkeys and sessions #502

2026-08-10T17:25:15Z

timmy commented

2026-08-10 17:25:15 +00:00

Closes #501

What changed

revoke a managed device session, grants, and linked passkey in one SQLite transaction
revoke all sessions, grants, passkeys, and challenges in one SQLite transaction
preserve all access state when any deletion fails

Verification

RED: rollback API tests proved the old routes removed passkeys before session deletion failed
GREEN: python3 -m pytest tests/ -q — 1009 passed

Closes #501 ## What changed - revoke a managed device session, grants, and linked passkey in one SQLite transaction - revoke all sessions, grants, passkeys, and challenges in one SQLite transaction - preserve all access state when any deletion fails ## Verification - RED: rollback API tests proved the old routes removed passkeys before session deletion failed - GREEN: `python3 -m pytest tests/ -q` — 1009 passed

timmy added 1 commit 2026-08-10 17:25:16 +00:00

fix: make access revocation atomic (Closes #501 )

CI / lint (pull_request) Successful in 1m5s

Details

CI / build-release (pull_request) Successful in 6s

Details

CI / release-candidate (pull_request) Has been skipped

Details

91c59a2953

timmy merged commit 4f0e6544b3 into main

2026-08-10 17:27:01 +00:00

timmy referenced this issue from a commit

2026-08-10 17:27:02 +00:00

Merge pull request 'Make access revocation atomic across passkeys and sessions' (#502) from timmy/501-atomic-access-revocation into main

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: stackchain/stackchain-dashboard#502