Repository navigation
Update isAuthenticated to read from the session - #760
Merged
Merged
Conversation
|
The latest updates on your projects. Learn more about Vercel for GitHub.
1 Skipped Deployment
|
This was referenced Oct 20, 2026
Collaborator
Author
This stack of pull requests is managed by Graphite. Learn more about stacking. |
This was referenced Oct 20, 2026
dowski
force-pushed
the
dowski/auth-state-server
branch
from
October 20, 2026 15:33
c251843 to
b9adb4c
Compare
dowski
force-pushed
the
dowski/revoke-session-handle
branch
from
October 20, 2026 15:33
fb4748f to
ebf9d14
Compare
dowski
force-pushed
the
dowski/revoke-session-handle
branch
from
October 20, 2026 15:46
ebf9d14 to
86e0b19
Compare
dowski
force-pushed
the
dowski/auth-state-server
branch
from
October 20, 2026 15:46
b9adb4c to
584af24
Compare
dowski
force-pushed
the
dowski/auth-state-server
branch
from
October 20, 2026 16:19
584af24 to
caf47c7
Compare
dowski
changed the title
dowski
changed the title
dowski
force-pushed
the
dowski/auth-state-server
branch
from
October 21, 2026 14:16
caf47c7 to
6638742
Compare
dowski
force-pushed
the
dowski/revoke-session-handle
branch
from
October 21, 2026 14:16
86e0b19 to
1053d64
Compare
dowski
force-pushed
the
dowski/revoke-session-handle
branch
from
October 21, 2026 14:23
1053d64 to
3f34310
Compare
dowski
force-pushed
the
dowski/auth-state-server
branch
from
October 21, 2026 14:23
6638742 to
09a7584
Compare
dowski
force-pushed
the
dowski/auth-state-server
branch
from
October 21, 2026 16:39
09a7584 to
f7ba3a5
Compare
dowski
force-pushed
the
dowski/revoke-session-handle
branch
from
October 21, 2026 16:39
3f34310 to
ff30c70
Compare
dowski
force-pushed
the
dowski/auth-state-server
branch
from
October 21, 2026 19:50
f7ba3a5 to
e6411e9
Compare
dowski
force-pushed
the
dowski/revoke-session-handle
branch
from
October 21, 2026 19:50
ff30c70 to
2f66a76
Compare
commit: |
![cubic-dev-ai[bot]](https://avatars.githubusercontent.com/in/1082092?s=60&v=4){kind=small}
There was a problem hiding this comment.
No issues found across 2 files
This PR changes authentication, authorization, or input validation. Ultrareviews find 2.4x more serious bugs than standard reviews. Comment @cubic-dev-ai ultrareview to run one.
Re-trigger cubic
dowski
force-pushed
the
dowski/auth-state-server
branch
from
October 26, 2026 23:27
183849b to
484d4d8
Compare
dowski
force-pushed
the
dowski/revoke-session-handle
branch
from
October 26, 2026 23:27
fcde1bf to
201b3bd
Compare
dowski
force-pushed
the
dowski/revoke-session-handle
branch
from
October 26, 2026 23:44
201b3bd to
957d13b
Compare
dowski
force-pushed
the
dowski/auth-state-server
branch
from
October 26, 2026 23:44
484d4d8 to
55613a7
Compare
dowski
force-pushed
the
dowski/revoke-session-handle
branch
2 times, most recently
from
October 26, 2026 23:50
520e0ba to
2a03112
Compare
dowski
force-pushed
the
dowski/auth-state-server
branch
from
October 26, 2026 23:50
55613a7 to
c951ae8
Compare
dowski
force-pushed
the
dowski/revoke-session-handle
branch
from
October 27, 2026 14:51
2a03112 to
adf014c
Compare
dowski
force-pushed
the
dowski/auth-state-server
branch
from
October 27, 2026 14:51
c951ae8 to
0c52fd4
Compare
dowski
changed the base branch from
dowski/revoke-session-handle
to
graphite-base/760
October 27, 2026 15:00
dowski
force-pushed
the
dowski/auth-state-server
branch
from
October 27, 2026 15:00
0c52fd4 to
18e3159
Compare
dowski
force-pushed
the
graphite-base/760
branch
from
October 27, 2026 15:00
adf014c to
09915cc
Compare
dowski
force-pushed
the
dowski/auth-state-server
branch
from
October 27, 2026 15:01
18e3159 to
e86f46c
Compare
dowski
force-pushed
the
dowski/auth-state-server
branch
from
October 27, 2026 21:49
e86f46c to
e3d65ba
Compare
The core's `isAuthenticated` query now answers through `getAuthUserId`, so it is `true` only while the access token's session (its subject) exists, not merely while the token verifies. A subscriber re-runs the moment the session is deleted, so revocation is observable before the token expires, and the SSR cookie check becomes revocation-aware too. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
dowski
force-pushed
the
dowski/auth-state-server
branch
from
October 28, 2026 14:05
e3d65ba to
0ccb472
Compare
This branch was successfully deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Now code that observes the authenticated state is session based rather than returning true if the JWT identifies a user.