feat(auth): make revocation and account deletion real (w4c) - #5337

Merged

iscekic merged 26 commits into

mainfrom

audit-w4c-revocation-9496

Aug 18, 2026

Commits on Aug 17, 2026

feat(auth): verify current pepper and active account on session and cloud-agent JWT auth
iscekic
committed
d60ca67
feat(session-ingest): mint and consume one-use web tickets for /api/user/web
iscekic
committed
6ef3262

Commits on Aug 18, 2026

feat(active-sessions): mint one-use web tickets via getToken mutation
iscekic
committed
21c12cf
test(mobile): assert getToken mints the ingest ticket as a mutation
iscekic
committed
a9a00a1
feat(cloud-agent): bind stream tickets to audience and consume nonce once
iscekic
committed
6a02188
fix(organizations): read primary db for group policy admission
iscekic
committed
77d0813
fix(mobile): store iOS bearer tokens with WHEN_UNLOCKED_THIS_DEVICE_ONLY
iscekic
committed
af3f65a
feat(cloud-agent): return ticket and expiresAt from every getTicket client
iscekic
committed
e4c971d
feat(session-ingest): recheck membership on command and close sockets on removal
iscekic
committed
a44f1cd
feat(user): reauthenticate and perform GDPR removal on account deletion
iscekic
committed
1f88e88
test: satisfy typecheck and lint in changed test files
iscekic
committed
075a45f
test(extension): return expiresAt from stream-ticket e2e mock
iscekic
committed
6068c10
test(cloud-agent): prove /terminal nonce replay is rejected
iscekic
committed
460a397
test(seed): add w4c-org-pair fixture for member-revocation E2E
iscekic
committed
3261316
Merge remote-tracking branch 'origin/main' into audit-w4c-revocation-9496
iscekic
committed
fd2705a
refactor(session-ingest): drop unused ticket consume response schema
iscekic
committed
32ec70d
fix(cloud-agent): isolate pg-dependent kilo token validation
iscekic
committed
e0b441c
Merge remote-tracking branch 'origin/main' into audit-w4c-revocation-9496
iscekic
committed
ac56293
fix(user): enforce code expiry and attempt budget on account deletion
iscekic
committed
a747102
fix(sdk): refresh one-use ingest ticket on every reconnect
iscekic
committed
00fb97a
fix(cloud-agent): expire stream-ticket nonce storage after ticket expiry
iscekic
committed
412d878
chore: retrigger review
iscekic
committed
54c4c1f
fix(auth): consume the deletion code only after GDPR removal succeeds
iscekic
committed
d1c62c4
fix(session-ingest): report auth dependency outages as 503, not 401
iscekic
committed
151820c
Merge remote-tracking branch 'origin/main' into audit-w4c-revocation-9496
iscekic
committed
ee56d50
test(mobile): cast api.send fixture to branded SDK types
iscekic
committed
581fc81

Navigation Menu

Uh oh!

feat(auth): make revocation and account deletion real (w4c) - #5337

feat(auth): make revocation and account deletion real (w4c)#5337
iscekic merged 26 commits into
mainfrom
audit-w4c-revocation-9496

Commits on Aug 17, 2026

feat(auth): verify current pepper and active account on session and cloud-agent JWT auth

feat(session-ingest): mint and consume one-use web tickets for /api/user/web

Commits on Aug 18, 2026

feat(active-sessions): mint one-use web tickets via getToken mutation

test(mobile): assert getToken mints the ingest ticket as a mutation

feat(cloud-agent): bind stream tickets to audience and consume nonce once

fix(organizations): read primary db for group policy admission

fix(mobile): store iOS bearer tokens with WHEN_UNLOCKED_THIS_DEVICE_ONLY

feat(cloud-agent): return ticket and expiresAt from every getTicket client

feat(session-ingest): recheck membership on command and close sockets on removal

feat(user): reauthenticate and perform GDPR removal on account deletion

test: satisfy typecheck and lint in changed test files

test(extension): return expiresAt from stream-ticket e2e mock

test(cloud-agent): prove /terminal nonce replay is rejected

test(seed): add w4c-org-pair fixture for member-revocation E2E

Merge remote-tracking branch 'origin/main' into audit-w4c-revocation-9496

refactor(session-ingest): drop unused ticket consume response schema

fix(cloud-agent): isolate pg-dependent kilo token validation

Merge remote-tracking branch 'origin/main' into audit-w4c-revocation-9496

fix(user): enforce code expiry and attempt budget on account deletion

fix(sdk): refresh one-use ingest ticket on every reconnect

fix(cloud-agent): expire stream-ticket nonce storage after ticket expiry

chore: retrigger review

fix(auth): consume the deletion code only after GDPR removal succeeds

fix(session-ingest): report auth dependency outages as 503, not 401

Merge remote-tracking branch 'origin/main' into audit-w4c-revocation-9496

test(mobile): cast api.send fixture to branded SDK types