si
si copied to clipboard
systeminit
feat(auth-api): Revoke tokens from a deleted workspace
Due to a recent change to allow a workspace token to create and manage the workspace lifecycle, we need to revoke the tokens for a workspace when the workspace has been deleted
This means the usage of that token cannot be made at all! We don’t want tokens to be in circulation that allow a user to create or update workspaces if they are not actually able to be revoked or expired
This work also includes a migration to allow us to revoke existing tokens that would have fallen through the cracks here
Also introduces a reason into the revokeToken posthog event so that we can tell a user the token has been revoked based on X action
![github-actions[bot] avatar](https://avatars.githubusercontent.com/in/15368?v=4 "Published by a pub.dev verified publisher"){kind=small}