57d2a6a6e3
All checks were successful
Build and Deploy / build-and-deploy (push) Successful in 4m53s
_load_user runs before _check_auth_state, so g.user was already set when the grant was found revoked. The session was cleared but g.user stayed populated, causing the template to render the signed-in UI for one request after logout. Now sets g.user = None alongside the session clear. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>