Skip to content

[2.24 backport] fix: expire token for prebuilds user when regenerating session token (#19667) #19669

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
merged 4 commits into from
Sep 3, 2025
Merged

[2.24 backport] fix: expire token for prebuilds user when regenerating session token (#19667) #19669

merged 4 commits into from
Sep 3, 2025
+360 −14

Conversation

johnstcn
Copy link
Member

@johnstcn johnstcn commented Sep 2, 2025

  • provisionerdserver: Expires prebuild user token for workspace, if it exists, when regenerating session token.
  • dbauthz: disallow prebuilds user from creating api keys
  • dbpurge: added functionality to expire stale api keys owned by the prebuilds user

(cherry picked from commit 06cbb28)

@johnstcn
fix: expire token for prebuilds user when regenerating session token (#…
3785d35 
…19667)

* provisionerdserver: Expires prebuild user token for workspace, if it
exists, when regenerating session token.
* dbauthz: disallow prebuilds user from creating api keys
* dbpurge: added functionality to expire stale api keys owned by the
prebuilds user

(cherry picked from commit 06cbb28)
@johnstcn johnstcn self-assigned this Sep 2, 2025
@johnstcn johnstcn added the cherry-pick/v2.24 Needs to be cherry-picked to the 2.24 release branch label Sep 2, 2025
@johnstcn johnstcn mentioned this pull request Sep 2, 2025
Merged
@johnstcn johnstcn changed the title [2.24 cherry] fix: expire token for prebuilds user when regenerating session token (#19667) [2.24 backport] fix: expire token for prebuilds user when regenerating session token (#19667) Sep 2, 2025
@johnstcn johnstcn merged commit 20d67d7 into release/2.24 Sep 3, 2025
34 of 35 checks passed
@johnstcn johnstcn deleted the cj/release/2.24/provisionerdserver-expire-prebuild-session-token branch September 3, 2025 08:22
@github-actions github-actions bot locked and limited conversation to collaborators Sep 3, 2025
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Reviewers

@jdomeracki-coder jdomeracki-coder jdomeracki-coder approved these changes

Assignees

@johnstcn johnstcn

Labels
cherry-pick/v2.24 Needs to be cherry-picked to the 2.24 release branch
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@johnstcn @jdomeracki-coder