gilesb e485384d2f Add /auth/revoke-user to revoke all tokens for a user ...

- Track user tokens in Redis set (artdag:user_tokens:{username})
- Register token when user authenticates via /auth
- Add /auth/revoke-user endpoint to revoke all user tokens
- L2 calls this on logout to revoke scoped tokens

Fixes logout not working across L1/L2 (scoped tokens differ from L2 token).

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

2026-01-09 22:22:08 +00:00

178 KiB

Raw Blame History

View Raw