Purge private data after remote session revocation #338

2026-08-08T20:17:34Z

timmy commented

2026-08-08 20:17:34 +00:00

Closes #337

What changed

Distinguish correctly signed, unexpired revoked sessions from generic invalid/expired authentication.
Clear Stackchain-owned storage, queued outbox data, and dashboard caches before revoked devices can sign in again.
Cover API, top-level navigation, login bootstrap, and service-worker background delivery while preserving ordinary expiry recovery.

Verification

Focused: 78 passed in 6.75s
Full suite: 627 passed in 24.72s
git diff --check clean.

Closes #337 ## What changed - Distinguish correctly signed, unexpired revoked sessions from generic invalid/expired authentication. - Clear Stackchain-owned storage, queued outbox data, and dashboard caches before revoked devices can sign in again. - Cover API, top-level navigation, login bootstrap, and service-worker background delivery while preserving ordinary expiry recovery. ## Verification - Focused: `78 passed in 6.75s` - Full suite: `627 passed in 24.72s` - `git diff --check` clean.

timmy added 1 commit 2026-08-08 20:17:34 +00:00

security: purge data after remote session revocation (#337 )

CI / build-frontend (pull_request) Successful in 6s

Details

CI / lint (pull_request) Successful in 37s

Details

b4dc785dd8

timmy merged commit 9e68382bd7 into main

2026-08-08 20:18:40 +00:00

timmy referenced this issue from a commit

2026-08-08 20:18:41 +00:00

Merge pull request 'Purge private data after remote session revocation' (#338) from timmy/337-purge-private-data-after-remote-revocation into main

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: stackchain/stackchain-dashboard#338