stacklok / toolhive / 32235296895

70%

Build Type

push

github

Committed by web-flow

Commit Message

Deduplicate refreshes by storage row (#6361)

Fixes #6356.

Use an opaque storage-defined row identity as the in-process singleflight key instead of the caller session ID. Re-read the authoritative row inside the flight so late callers do not redeem a stale rotated refresh token, and return independent token copies to each caller.

Memory and Redis derive opaque hashed row identities. Tests cover aliased rows, late stale callers, independent rows, resolver failures, and result isolation. This remains process-local; distributed coordination is tracked by #4122.

Coverage Stats

70 of 83 new or added lines in 5 files covered. (84.34%)

84 existing lines in 6 files now uncovered.

85737 of 121744 relevant lines covered (70.42%)

98.19 hits per line