umputun / stash / 19921911432

83%

push

github

feat(auth): selective session invalidation on config reload (#24)

Instead of invalidating all sessions when auth config is reloaded,
only invalidate sessions for users that were removed or had their
password changed. Users with only permission changes keep their
sessions.

- Add DeleteSessionsByUsername method to SessionStore interface
- Add idx_sessions_username index for efficient username-based deletion
- Add comprehensive tests for selective invalidation scenarios
- Add debug logging to store operations

54 of 56 new or added lines in 2 files covered. (96.43%)

2362 of 2856 relevant lines covered (82.7%)

90.6 hits per line