romshark / datapages / 36185697162

44%

Build Type

push

github

Committed by romshark

Commit Message

fix: Preserve NATS KV session revocation

A request that read a session before sign-out, user-wide revocation,
or expiry could save it after deletion and recreate it.
The revoked cookie then authenticated again,
including a stolen cookie the user had revoked.

Only applications calling `natskv.SessionManager.SaveSession`
are affected.

JetStream conditional writes require an extra read:
166 us -> 341 us per save.

Coverage Stats

16 of 27 new or added lines in 1 file covered. (59.26%)

2 existing lines in 1 file now uncovered.

14191 of 35713 relevant lines covered (39.74%)

34.32 hits per line