Fix session invalidation on logout and revoke-device bug - #65

Merged

Tyjfre-j merged 13 commits into

Jul 16, 2026

Commits on Jul 13, 2026

refactor(session): remove dead SessionRedis model and UpsertSessionRow import
Tyjfre-j
committed
refactor(constant): remove unused UserSessionByUser RedisKey enum
Tyjfre-j
committed
refactor(users): replace UserSessionByUser redis pattern with session_querier
Tyjfre-j
committed
fix(auth): remove dead RedisKey.UserSessionByUser reference in revoke_device
Tyjfre-j
committed
test(auth): update old logout test to assert session-scoped redis key
Tyjfre-j
committed
fix(devices): scope get_device_by_id by user_id, add explicit unscoped variant
Tyjfre-j
committed
fix(device): pass user_id through to now-scoped get_device_by_id
Tyjfre-j
committed
fix(users): use get_device_by_id_any for cross-user device collision check
Tyjfre-j
committed
test: add get_device_by_id_any to device querier fakes and mocks
Tyjfre-j
committed