5 Commits (7dd9f407990a67f0ea8bf1fca03d2a7da8a093e1)

Author	SHA1	Message	Date
Micke Nordin	58cf6c7626	test: Add missing override ... Also update stale comment that mentioned a function that no longer exists. Signed-off-by: Micke Nordin <kano@sunet.se>	1 month ago
Micke Nordin	99ac009a12	fix(cloud_federation_api): allow multiple access tokens per refresh token ... A refresh token may back several concurrent access tokens. E.g. in a multi protocol share for a webapp the webdav mount and the webapp launcher exchange the same secret, so the exchange must not assume a single mapping. Drop the revoke-previous step and the findByRefreshToken (findEntity) lookup, which threw MultipleObjectsReturnedException once more than one access token existed. Expiry and unshare cleanup revoke the tokens instead. Assisted-by: ClaudeCode:claude-fable-5 Signed-off-by: Micke Nordin <kano@sunet.se>	1 month ago
Micke Nordin	7ee8b49afc	fix(cloud_federation_api): revoke OCM tokens when a federated share is removed ... Extract the revoke-then-delete logic into OcmTokenService and add a ShareDeletedEvent listener that revokes the access tokens exchanged from a removed share's secret, drops their ocm_token_map rows, and invalidates the refresh token — instead of leaving them until the expiry job, which can no longer find them once the share is gone. Assisted-by: ClaudeCode:claude-fable-5 Signed-off-by: Micke Nordin <kano@sunet.se>	1 month ago
Micke Nordin	17698226d1	fix(cloud_federation_api): revoke OCM access tokens on expiry cleanup ... The cleanup job only deleted ocm_token_map rows, orphaning the temporary access tokens in oc_authtoken so they accumulated indefinitely. Revoke each expired access token before dropping its mapping. Assisted-by: ClaudeCode:claude-fable-5 Signed-off-by: Micke Nordin <kano@sunet.se>	1 month ago
Enrique Pérez Arnaud	789ff6a8a3	feat(cloud_federation_api): add token exchange endpoint issuing JWT access tokens ... Co-authored-by: Micke Nordin <kano@sunet.se> Signed-off-by: Micke Nordin <kano@sunet.se> Signed-off-by: Enrique Pérez Arnaud <enrique@cazalla.net>	2 months ago