Skip to content

Guard token refresh after SCIM deprovisioning#4469

Open
nguyenlnp wants to merge 1 commit into
orchestration-agent:mainfrom
nguyenlnp:fix/scim-deprovision-refresh-4468
Open

Guard token refresh after SCIM deprovisioning#4469
nguyenlnp wants to merge 1 commit into
orchestration-agent:mainfrom
nguyenlnp:fix/scim-deprovision-refresh-4468

Conversation

@nguyenlnp
Copy link
Copy Markdown

Summary

  • add identity lifecycle store for SCIM deprovision markers
  • revoke cached sessions and API token mappings when SCIM deprovisions a user
  • fail token refresh closed for deprovisioned users, inactive sessions, and revoked tokens

Tests

  • python3 -m pytest tests/test_identity_lifecycle.py -q
  • python3 -m py_compile src/api/identity.py tests/test_identity_lifecycle.py src/agent/init.py
  • git diff --check

/claim #4468

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant